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(57) Abstract: 

PROBLEM TO BE SOLVED: To make illegal use by 
forgery or duplication extremely difficult, to certify 
the content of a ticket to a third person, and to 
maintain the anonymity of a user at the time of using 
the ticket in an electronic ticket using environment. 

SOLUTION: A ticket preparing part 4 of a ticket 
preparing and issuing device 1 prepares the 
specification of a ticket corresponding to a prescribed 
service or article based on a ticket preparation 
request. A ticket issuing part 5 issues a corresponding 
ticket by inputting a ticket identifier, certifier 
identifier, ticket specification identifier, and ticket 
additional information based on a ticket issue request. 
A ticket certifying device 2 holds the ticket issued by 
the ticket issuing part 5, and certifies the holding of 
the ticket by communicating with a ticket verifying 
device 3. The ticket verifying device 3 holds the ticket 
identifier and a ticket verification procedure prepared 
by the ticket preparing means 4, and operates the 
verification of the ticket by communicating with the 
ticket certifying device 2. 
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MSBHQEZ 
75 



[4WIII#©*H] 

?-^y vwmtimm^fkh, 

tr y YWn^WLhfrhte*) , ±1E^y h»0E*11H:, 
^ y h¥UA#S*1ff*ft&3*Ik t , rtry hfiitt^S 10 
b. 4>ft< bt>7-lry b?0ffl#H*«*i:^^y h*»£> 

[ft*® 2 3 fcSBBB, 

tetim*imi-&'r4ry hwmmmm*?s4, ems* 

BEW3611H#fll*a»e>, fWAH*«-T?*>57-*-y h*r 

y f^««fcB^5^©EW«rfT**5*ttSfEW# 

-C, ±B7^y b3SfT3£«te, *^y M«W»#*r^ 
S^4r y MWMM»f^i8^aSr#*.fcr. t b 30 

-rsm^-^y h^r^ 

[ 4 3 It&S 2 £ fcH: 3 IBttcDffi^^^ y b V 
y hZ^^M~ 0 

h^fA^ot^ ^*-y b«MWf«B^«< 1 1>^- 
Ty h^mmmbf-^y MWtt**»fe*5^i:*rWR 
it5t : ff^j' bV^T'A. 0 40 

(1**916 ] »3M(5B««>lWy h'/^^ATj 

[W*58J W*«2~7©V^-rtt^tC|5«©«-?^ 
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2 

[flt&K 9 1 ft** 8 B*©*^*' y b W/At 

iiir&g i o 3 nt$« 9 mmnn^f-^- y 

fc«-fflr**'Rm-.57-^y h*!J'^h*a*«it/tw 
l»*K8. 9. SfcttlOK*©*^ 

^-y h-^rA. 

[it i 2 j « #s i o &*©«??-*- y v 

At?fcoT, 4>&< £ lftii, fl-SBa^SSg!*.^ 

[ f»#« 1 4 3 9tfclil0 IE«©tt^^<^ y 

h^rAT?S>ot, ±«BliE9lttC©Affi!KffiiH«#a 
IXf-try h©*SMt«r*i-|'S»«IISr^5' biM31^3 

©*3attfc*-*-|*J«5««*1*Jfe©«t?*>6i:#jcH:, *f 

e»i-**«t LTJEb</j:v^'^>©^e^•^-5r 
i 5 j ntjjts 1 4 mm<om?7-jr y h 

Atfeot, Jt»WBQS«ttil>fc< fcfclflE* JiBBEW 

6>eiSiiS««lcLfc4Sot, ^y hkB8jt#«-fe 
ttfc, h©*SMt**-*-rt«BJ*tlifcaejEbT, * 

Jftft^y h©«a*fb*>*v^tt«S*i«:ofc^y h© 

««liE9i©*B-e^y b©*^V^t LT^tBi-Sl^ 

#enw*fceai-5«*i:bTjEb<3tev^t>©ft' 

7 3 »3ft«l 6©«^^y h^fA-e 



3 

Kffimz&mv, ±w.mwmm&. ±w.mmmm^hm 

fc, ^*y b©#*v*i:LT«fB1-&rt»tt«*l9!£ 

[flt&K 1 8 ] ft*^ 2-17 <D^Tivt>Hz.um<on 
WyM/^ATJboT, JbCliEHg&IEttaaR©** 
B«liE#«#Sr|IWTnriB*|iEW#IBs(Eff 5^ 
y b4*«fc««©— ttfrJBV^ ift#)ttIEH?M&S& 
U *nBtEB8*r3etH-*i i: SrWRi/*-*** T^y b 10 

[n&s i g j m&g 2 ~ i 7 ©v v*"*t*»teflE«©m 

3Mft# ©4>ft < th— ^©^y^fciaizfcbfc^n^ 

[fi^ 2 o j 2~i9©i fra>KfB«©« 

tE^R#Kj8VNr» ±Ctt9ESi1U3J:tFJbeCE9ga&1E|R| 20 

•eaftsftfcflMiL *>sv*h:*©— as, *>5vn«;fre> 

[HI** 2 1 ] ft j&g 2~20©V vf *uWClE*©« 

W?>^fA-?*>ot, _hfE$SESMfcJ:*J-ig8SE 

fflbfc««fc» J:BEW36«#J:efllf*fc«J|t«riKbT 
ft# bfcflMt©tt*fil#*-a r t 

y hiX-X^A,, 

[M&fl 2 2 ] ffl&g 2-21 ©V^TtvdMc|5«©« 30 
WyhVXfA^ot, _hfE&E^Bli> _hfE#S 
BE^«©@^$gSr^-t-StfetiE^«@*ffif^«p¥S 
^*y hSr^^S^y h«##8*«*.. *HB 
*WEte*5V*T*-^y h*»e>©**Sr*U«i-5r fc«r*MR 

2 3 J St** 2 ~ 2 2 ©VN-ftV^(C|2«©m 
Wyb^fAT?*-3t, JbfEEWSW^ fSEfit 

EEWS«0*r1f <fc 9Bf«©*»T?iEWfllf«l«rtl«i- 

SrtSrWtfSt-f^^ h^fA, 40 
[»*«2 4] »*92 3©iW 5 'h^7A-!? 

(n, E) -?£>»K A (n) *tfen©T-Ctt« 
£&£!£©&&-?£> >K ED=1 mod X 
(n) -CfcU, T^y Y<DttMtn®.ft 1 LXtb*). EKS 
BH***!9*»«©-*l^ttB8»d, (L, n) -C* 
9, f^yhiJt :=D-d, (L, n) <b*VT 
V^t#, _hiBEW£H2te, ^IEtS$6C(c*rbT, EM 
ti?$RR£C©ifcn-e© t i-«tss»t, c©iSn-e©— 
#fRH£HXMIftd, (L. n) *»^t1-5S^i:©ftn 50 
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-C©;|»C«C ,11 ' a "'> mod n b bTBEWflMRSrtHlt 

^5i£§r#$ti:-r5ffir?-^y b^fA 0 
[«#* 2 5 ] 2 3 !E«©®^^ y h ~>^ir 

©4£gB«$R# (n, E) , EDslmod A 

(n) ^*-y h©#iPlf#dSL-eS>t), 

fitWttOtd.ffe!), f (d„, L, n) £ 
-^fattgS&t LT, f^^t :=D-f (d„, 
L, n) -C-$-;i?>;ft-CV^i:t. iilEEWSfite. ISE 
1f$RCtc^bT, EM*^RSrC©ftn-t?© t K£Z>W 
mt. C©ffin-e©— *|Bj14HI^:iit f (d„, L, n) 
Sr^t-f-'5Smi:©ffin-e©WC'C f< ' iuL - > mo 

*f->ry h^rA. 
[ft** 2 6 ] ft#g 2 3 1B«©®^-^ y h 
ATfcoT, f-try h©8HE^^5x-e$>>), P*S^ 

*-Rl¥G©tt8: P ©5c-efc !K f-pyh ©^Pllf 

(p, G, g, y) -CJfc!?, y = g-Cfct) > 
©#*D««*LTf*>!», VEgljgBBffffrttiPett©^ 

ftttPigcd,, (L, y) T?*>9, ?^y h«*t : =x- 
d„ (L, y) •C-%-^.?>ttTVNSi:#. _h|S5EW^« 

BKilMICl:»L-C, EWtimR&C©t Srifgfci 
-f-5»*i. C©-;!7fti4§i$:ttd„ (L, y) £r«3gc 
t-t"^li^t©aiC t C <,oa -"t LTEMW$RSrH-#-r 
3r££r#$tii-.3®^^y hf^A. 
[ft** 2 7 ] ft** 2 3 lE«©Sr?-^ y h V*? 1 
A-^fcoT, ^y h©S«'lf«* 5 x-t?fc«3, f^j-h 
(DAfflffim* (p, G, g, y) "C$>9> y = g*T*> 
9. ^y h©f«PflMR!^LT?jE>9, CE^VB^Wtt 
tfS8Mg©ffld„-e£>!3, f (d„, L, y) Sr— ^[pJttiS 
*fcbT\ f^j-hiSt :=x-f (d„, L, y) "C 

t"C< EK1f«RS:C© t Sr*B^t-f-SS^t, C©- 
^i£]ttPBft«f (d„, L, y) ^}f^ti-^S*i© 

2 8 J If tit* 2 3 |E«©S^-^^ y b i/*"? 
*y h^Mlf^t J;^)EK^S#^IEbv^^^f 5d»Sr¥U^ 

flMRSrSai-^itSrWItti-SW^^y 

A. 

[M#g 2 9 3 ft** 2 SIE^©^;^^^ y h^^^ 

A-efcoT. ±$v§mmm*. ise^c tE^ft^R 

t^^h^iM (n, E) t©4§-g\ E^««RSr 
ffin-CE^bfcfe©€rC tit^U fc^tf y b?l)M*ifc 
oT, R E mo d n = C | I M (CtMt©fy bj* 
W) t^oTV^^EWffi^HijEbV^^^b, UWffi 

m^iE^^M&teM&mwffimzmib&tLitiitm&b b 



(4) 

5 

[f»#« 3 o j m&m 2 8 mm<on*?-fr y v 

if^yKiltti (n, E) £<£>#-£% I Ir^ft^x. 
-CE"* bfc t <E> £ C £ rtM$ Umtf HHHt $RteIE bV ^ 

y h->^fA 0 

[ft 3 1 3 2 3 lEtt^liT-^^- y h is XT 10 

i-eibot, ±|E|iEBJSgt*. f-fry hb^y YHM 

m&tuwmmmmm&k x<om^^mx^^ry hw 

Z>^b*%f®Lb1rZ>m=f-T / ry h^fi. 
[ft im. 3 2 ] If &g 3 1 IE«©m^^^" y h v-^^ 

-fbSrEut tt, ±IEH^Se«, ^yM*t : =E„ 20 
(D | |L) X^hilXV^^b^^ ^y h t £rd„ 

A e 

[St*S 3 3 ] fj}5jt£ 3 1 lEttOS^-^ y h 

<©#iP«^L-efci9 % &H361tB*rflHfta*ft>SlitM9-S 

it&Evb U h (L) Sr-#|«attBWfti: Lt. _hlEtiE 
^3£«f*, ^y h# t : =E„ (D | | h (L) ) T? 30 

Tf^y h«M£tit$aD£ti-|SU ^y h#*PW#LW 
-*lRH4BB»tth (L) £Un-fZ>Z.biz.£<0, Lco^ 

[nt*gi 3 4 j w^jg 3 1 mm.<om^-f-^r y h >xx 

Affcot, ^j/ h©^tt$R* s D-Cfei3, ^yb 

flStrE^U h (L) *-*|SHtH»i:br, ^y 40 
h& t : = (E, (D) „ h (d„ | | D | | L) ) X*S- 

b, h t©*2/fc&i-;*rflttlfflfctth (d,| 

I D | |L) fcfcJttti"5ili:fcJ:or^y 
*L©*^ttS:lft|iE-*-*ri:Sr«Mii-«-S*-7-^"Jry h 

[1**53 5] M&S2 8~3 OOV^-ftt^KlBBttO 
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£i&fiEtif$a<fc 9 nijuirasrtUM-a r £ £#m£-r5« 

-f-^y bisXTJ* 0 
imi&g. 3 6 J ffi&g 3 5 lEtt<Z>flrP^ y h >^ir 

Ttry bco8Hgffif$B£:D £ b» ffl*flmfiH*#Itt;i 
«#<5*LfcttWj1lMlfcMi: U mffiflMRSrCfc-f-Si:* 

[*1] 

C ^ mod n 

b^x^n-r^^b^mwt-r^m^f-^y hv^f 

Ac 

[lt*9( 3 7 3 3 5 mm<om^^r y h f^T 

zum'rz-b&w&b-rzn^'iry h^fA, 

[It&BS 8 3 »^3 7fS«<0®^^-?/ 

m.m.m&zcbirz>b. mmm^c \ imk:3e*n-s 

[lt*« 3 9 3 2 3 IBttOW^^-^ 5, ^ i/xf 

an* # b£*>m2 (ommmm^iE l v ^ 5 *>s-fu^ 

Ac 

[ffi^S 4 0 3 3 9 lE^©©^^^ y y 

^«^4feBEi-5fcfecDl»#v I I £ <©-g|5S:^^ e£ 
X (v) «SVN{c:fg£ LT, JiCSEWSSBtt, $g2<Ofg 
SEtNF4R jc £ 0 2 (OiiEKm^ p ft 
[&2J 

X = P e mod v 

[|*jfc3U 1 3 »*«3 9C4ft<D«?-^y hi/^f 

p = V s mod p 
SrWfc-*- £ t fcff 2 coSEKW^asi UV ^ £ i £ 

Sr#@t£-rs« ; ?-^3' h'^fA. 
[ft *S 4 2 3 mJHm 3 9 lE^OS^-^^ y h >X =r 

®2cOliE^^d5jEbV^^-J4. ^2COiIKjt$R|C 



(5) 

7 

[St*«4 33 W**4 28BU©«^F^y h^f 

©— SBSr^* t k X (v) teSVMcifc £: LT, -klSSE 

»4] 

X I I ii — p* mod v 

[It&K 4 4 J flt&ff 4 2 fB«©®^-:r^ 5, f. 
Atfcot, f-^ry h#*Plf^L«/>3&< 1 1, v I I £ 
co-ttSr-^ _UEBEWS«W:» &2©IMEfflrttz2:£ 

2©HM**p^ I Sr?-«>^x.fcRS#t LT, 

I {c^TL-c, 

[ft53 

£ 11 20 
X = P mod v 

»2©JiEHfll«H:S«>a**bfcAAflMlli: LTA*1f« 

Sr^t-TStt^^y M>-*x-6.„ 30 
4 6 j 2 3 IBic©®-?-^ y h 

[Ilt&g4 7] tt*«2 31Bft©m?7-*-? h?'*?' 

[ft im 4 8 ] If &g 2 3 iB«©®-?x^ y h 

[111**4 9] 11*312 SIB^wm^x^y F-^f 
ATfifeot, ±|S^SE^B»4, f& 2 ©l&fUff 
^i-SHS5WfRt <fc t) m 2 ©!iE^«#=Sr^i-5 r. k Sr# 

[fit*«5 0 3 M*gU 9 fEife©®^-^-^ h^f 

2fB8ti?$ft«: (v, £ ) k LT> £ 5 s l mod X 

(v> jwAwtsttsi:*, ±m&<mmm\z* m2<omu 50 
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If * x i 9 35 2 ©m§Jl W« p £ 

cm6 3 

<> : = # 4 mod f 

k VX4Lf8.-rZ>Zk*!®Wi.k-t-Z > m?-lF-'>r-y his^T 

[M*« 5 1 1 mm 4 9 |E«©«^x^ ?> h y^f 
4afHflM**r (p, g, a, u) iU, 

tj = g* mod p 

JiiE&iBggte. if 2 ©ISiiEtif * 
J:9J|i2CDlK9Him/>«r. 

p : = X 1 mod p 

[ff*^5 2] M&g4 9. 5 0*fctt5 lGttOt 
km 2 ©fBSEfffBSr <£ 0®2 ©SE^fS#Srtf*-rs £ £ 

[it** 5 3 3 »*b 5 2 iH«©m^-x^ >- v-^x 

•2rH§fim£ (v, e) tLt, £ 5= lmod A 
(v) asttfcStuSiS, ±E4M!ES1E»« A*»til$M£ 
£ ixfcA^lf $6 /xt SB 2 ©BliEflMft x <fc 

(9B2©SEK1t*p 
[ft 9] 

p : = x * mod v 

kX^X^L-r^^k^W^k-t^m^^ry Y^x*r 

[IS^5 43 W*«4 9, 5 0*fctt5 1|S«©® 
HSrJS-rtllKl, AA«f«HSi»^«Kfia«S^fcA*flMR 

Srfflv^x^ 2 ©^mf $R£x#rf-5 ^ t t f *m 

C»*«5 53 1*^95 4lEtt©« J ?-x^S' h^^X 

f&2<DWm$im&xk-rZ>k. flS2©RBEtt«frx I I 

»i~n%rr?>Zk&W®.k1rZ ) mi-3-triy h^fA 4 



9 

'J>te< t \>±&#->ry hSHfcfeftfcitfJLiB^y bM 
«#H*flMR*»6>. ^y hfirffesM-ST-^y MSfT* 

[11*55 7] «WSr*«ti-*^^-M|»**>fo** 

ifff^y b«ffl#HtfflWfc:j^j£©W*«:llfTLT3i 
/fcSftfciirfcWRir-t-a^^y h 0 

^y 4>ft< t fcf^y h»mnm.isxxf^y b 
^y hiEM»«fcj8V-Cx 

^y bmmmmmmm^m-r^^^y vmmmrn^ 

mm. t a» fe^ft £ twfcf* s?* /H» e> * s ^ y h «r 
«an-s?-*y hfiy«^a:fc» 

^y h§rfflWC©-?^y MEWS6«cJ:!)ftriiS*t 

J:|B^*y bBEH^©B*fl»*fcfciB^Vvr£fiJi 
i-J-aflfrf-^y h&BEgEft, 

^y b^^ttl^fiHWW«i:^e>^$nfc7* 

5fiTflMRi:*»6>BEH«««r*j«U -hWMEtSlltt:. JilE 
y hSHSfffiSHciijgL-C^S^fc 
ii*«MELT±|E^y hJcBBili-5««l©lWE*rliE 

[»!P!©»JWl*RW] 
[0 0 0 1] 

©ffr*, 3^fcJ:l*fU/B©Stflffc:§ll-*-S. 

[0 0 0 2] 

[«£*©&WJ iifT#, Af*> ^ 
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m&». ^y^K*-K, 

10 [o o o 3] roi 5*^y h^r rttliSf^? h 
£t?#-t\ jELv^^y h-efcsri ft-*BET?#s, i 

v*a„ «^tiHn*» f^j**«c#T?a>!), mmmm&mL 

m-T-S^tck 9 ftitttKuk-c* aUK©6£jktt:B*l 
20 m^f-fry h©£atcfcfcoT©*;*©1IIMI2:&o 
[0 0 0 4] n*?-try bit. =f~>rv h©fiJJBB# 

izjE%?mm%frmw&-r2>%s i ©«*««, «fr#ew 

©#|c^y bfc*^a*#fc^-j!t*v*J|S2©|£*ft 

fif* «lfliE^©amSr<^li-e^ S J: 5 Km 2 

4tELfcJ|S 3 3o©*&-cHa,^tuT# 

[0 0 0 5] WT> *tt*S«fcoV^TJmSclttWi-5. 
[0006] 01 ©tS5fcSWl4, y h©JWffl«ffcjE 

#^1f#) #-*.fe*t*Ui:**tifi:<5»t**«*^y 

ra, w^t^^ybxzM^m^m-r. m^m&oft 

v^?htt, flk5t4*bfct>©4!WllrS*b-5. 
[0 0 0 7] ^JEK*9bfc^y h©fiJfflSrE6Jh-rs 

»«i-»«PU©fr«*s»«>6Jx, a-frb-CVN^Jt^tflE 

©#^(-«, t©^17— KfrJWffl#^AAi-*. 
[0 0 0 8 3 !2©t*K»«, mt&VkftmgK.?-* 
y h«r«t^i-*«6Sr-^*.*V^a5T»jb6 0 ^©^jfe-C 
50 tt. fUffl*WSffif#Sr^V»Si85.®*s*VN©T, Eig'ttSr 



11 

B#©iiffa>«b:^s' h^Jl»b^v^«<D^S-i^^t 
-TSo M#©auft©fc«>, 5FUffl#tt» SMNHS*©## 

[0009] i #PI¥ 8-147 
5 0 O-^a-CM^Sfb-CV^. ^©^SrCf*. fiJ/B=f 

5©-TM»iett:HI*-e*>6. f^y HMWIi*»bf-^y 

h&JBtt>Wt-©l-#SU&#^££^ii-5r <hT% ^ 
s/ hSr«[^Six5ri:Sr6SihbTV«5. r ©#&(:: J: 4x 

T% «R©f-irs' bafTtfasafifbfc**©?-*-* b 
¥-©*MI^11fc*MfrT»*3 0 JfU^#fcBB-f 
Tfc, h©*45©jEStt«rlWB 

[0 0 10] »3©fil*KWfi, «ME«F©ffl««r^W-C 

[00113 r.©#&t»li, ^s> hfr&ttHffttfc Lt 

IE«r*©B«f2©ajiaitflfi:IHICt?*>»39S, *&IiE©2f 
fie****. *"f. *WE*1¥5*lHBtt\ &EH«lc3Jfc 
*£©i»!)3BL*UfflS*wfcVMB (f^y^) Sr^So 

■C. *U»tf©:iESttfcttE-rS. ftl/^t^^ 
£T\ WK«j:IEn#^©9fllSr$(ei-S£«^<:<4: 

[00123 ir*»y^j£K^©T*i?;*fcj#p©;fc.«> 

«©«ttBSr««-*-5*»as, M¥6- 5 2 5 1 8 ^ 
fS-cPB^Sfr-cv^o ©#»-?», S83©t&sfegtfffK 

*«L*<-C*J:v^i*54WMr#o. Wffl#l±, 13 
©a3Ka«lc*sitSliEM*!:ffia-r5*«fffi««:^#Mi! 
LTV^ C MBE«rfT5ififlrett» fBSESrfi 1 5M8: (*fcSE 

r©«SU«**»6,*?|fffl1fc*fcH*©^— * 
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[0 0 13] 

[0 0 14] LfctfoT. tW?Hi:li, &©3;& 

#*.«>*i/fc«W0l'3#*»=«fclEWi-S«IIB-e*>S. 
«U *3©«tBtt»2©*IB«r'&£L-CV'»<&©-T\ JS 
1 fc*3©«ffias$l3lS;l'uh,«, Mc&£©«MB 

[0015] tis i ©«*»«■?«» f u/B-ra* u^*#^ 

[ooi6] mm%&j£'femz.mmm<D$tttmm-irz> 
mfi 1 R£ £ ^aE^fijffl#©#5E« s M M^ft 
5. *Uffl#»S**K:aWftif©#*«l»«SrsW«-t- 

30 [00 17] §?>li, 9«lBlj|ft&ftJjg IfcaUffftftftft 

r©«t 5 3fe«9tt?rt* l ©flMB««lfe-e#*v\, 
[0018] *i ©«*a«K*v^r» fUffi##S*® 

SrESlh-C#^CV^©-C, ?FiEfOT©^:^itb, ^5'^ 

[0 0 19] »2©«*t»lfCtt, *Jffl**J««urvN 
40 ht*9t»**<-fS©KJ)P*.-C > «ff#*^- 

LTV^5 0 £ftJ:*> 2o©|«jH#£C*. ^l©Wffl 

3MT#K^©#tt^y hfc«^-C#*v^©t», ^ 
>Jr-> h©jEatt«r*H*l!i|iEBIi-*-«r fc*5HJifc**i 

50 [0 0 2 0] #W¥8- 1 4 7 5 0 o^mizm^^th 
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[0021] m3<o&%&.ffii*. mm<Dtc)t>{~mm£h 

W?tftv\, 10 
[0 0 2 2] 4#<2rip6-5 2 5 1 8 ^r^M^ift/C 

[00 2 3] r^s-em^fe ± 5 fc» 
-e*>a»3#t;:*r*-37'*y hcrtSEM©****, as 

4©$&fgT?fc3fOT#©e£tt$r, *WifcLTV*5£fc: 
[00 2 4] 20 

fcJ:S5FIfUffl!^##fcllb<» S52*5J:T*IB3©#&iE 
tU, KOrt^SrJISHWfciEWCSr, S&4© 

[0 0 2 5] 

[««fc««te-t-Sfc»©*«] 

yFWfAU. WT©^ y b^nmnt^-^r -y ME 30 
•fa*-*:? bSSffSMtt, f^y b®WWlW»ft«»t 

ff#«fc. lEraS1Ifc©iIflr#«i«:fc#o. 

[0026] vmmmt. ? b (»m®m « 40 

iBEW#«>ffl*tlM8i:*»6>^y h*«tfi"4. SEWS 
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^©sem t , f<r?h fc#&i-*««©jE*r*e*a* 

v\ *HB©*S*K:J:oTEW»fll**ai*^y hftfii 
[0 0 2 7] 

I»M©*Jfc©«aW HT, #»H©fiBli*ot?©J|Sl;: 

1. %tt«y^©tES (B12, 02 8, BI2 9) 

2. miommm 

2. 1. §85E#Sc 

2. 2. 1B*:te*rB:7'n (Hi 3, HI 9, H2 

0) 

2. 3. flCSiT'nha^ (1314, 1219, 02 
1) 

2. 4. f|2©*f-|g;/t3 ha/V (015, 019, 122 
2) 

2. 5. ^3©*f|g7'ci (016, 1219, 122 

3) 

2. 6. ^f4©*fffi§ya (12 16, 1219, 0 2 

4) 

2. 7. m5<D#ffi-7o (121 7, 121 9, 12 2 

5) 

Fa?-*-* h 

2 . 8 . MQ <DMffi7u b =/W (12 18, 1219, 122 
6) 

2. 9. ^7©*flS7 P CJ (12 18, 1219, 02 

7) 

/D^M-KSfyj'h (?¥3fc*WfB) 

2. 10. g{ 8 ©atfgT'ia (016, 019, 0 

2 4) 

mm&%t?->rv b 

2. 1 1. ^9©*HS7*n hnyw (01 8) 
7"y ^ K# — KS^-'Jr s> h 

2. 1 2. J&l 0©*ffiS:/ei hrjyv (018, 019, 
02 7) 

s<j Yij— YW?>ry b 
2. 1 3. mi lWStfS^n b=/U (t <t-/.CU) 



V 
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2. 14. SI 2 cofcffS^c (Hll 9, HI 3 1) 

2. 1 5. S 1 3©*HS7'p (E) 3 0) 
ttliE4»©*!/£ 

3. S2©3afc#!l 

3. i. mm^& 

3. 2. ^1 4©*ff£:7'cr h^/^ (Ml 3, Hll 9, H 

2 0) 

■&mW®3->rv h 10 
3. 3. Si 5©*HS:/o h=/> (HI 3 2, 019. EI 

3 3) 

A. S3©HJt0!l (H5~BI9) 
5. S4©5te6£#!J (El 4, El 5) 

[00 28] [ 1 . mm&»<r>wK\ 

(Ell, El 2, El 3, Ell 2, EI2 8, El 2 9) Ell (4 

flMifc • 3S*tS1* 1 , hCEHSIt 2 , iSX^^r y 20 

MftEE3£«3 $r^T?«j&£;fr-C^.5o ?^y hffr£ • 

^nmmm^y b^^wcA^xx^^y bmn^ 

©^y MSfTtfaffiJC^^-C, HWKHFfcKM 
IMMU^ £ ^ y MfeHBMlM- 1 ^ y httflPtimSr A 30 

[00293 f-*ry vmmm. 2 is, ^ y M»fr#» 

5(OftftVtc3-t-yb&&&V. f-lry btfcmmm3 b 

mm^nta^^y bn&m&mw-tZo 

Sfi 3 i4, f^F 4 ©ffrdt L y h ftSU 

ftf^y UftlE#JSfrfiy*U MEWS6112 t 

», ^ y h m& • mmm 1 , ^ y vwmm 2 43 

J: tf^y HWE»*fcf±Ht|cf^ 40 

[0 0 3 0] EI2*5±U?EI3(*^y • JRfi'Jfifll 

1 ©#!/££:£#£ LT^LTV^o Ell2[i^ 
MiEB83tB2iaJ:tJ«^y b&fiBgfi3©#lj?K£:£#: 
t LT^LTV-So EI2*3<tU?EI3f*»SffllI— © 

&WEtefflV^50JS:fBWi-5©f::^LT, E13«:RSA 
■^MBS^^Sr^BEI^ffiV'>5'p!ISrS5iKLTV'»2>o 
[0 0 3 13 El 2 fc*SV*T, ^ f hfMc • WffmU 1 
11, ^y hft)$.& (^S) 4. ^y H&*t« (^ 50 
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m 5. ^y bmmr-^^-^Gis^um^mm 

^7*-^-<— ^.7§r*b-CV^ 0 EISKSSV'-ChJ:, $ 

hfft« • ftftmm 1 ©fftffl (»m Kov^TteS 
3 ©SaS«» itf»4 ©UttsftlfrlMB LT*»t5. 

[0 0 3 23 Ell 2{;i:*3l^-C, b#fc5E$^3tt:, 

tfcBE^JiBffetrgB 1 1 l*s<fcU<iI{igI5l 1 2^ftti3 

1, !^s/ h&3fg|51 2 2, Bfffflttftttffi 1 2 3 . rt 

SP^^^gp 12 4, HEig^JillllfTgP 125 *s J:t«Bfll 
«S1 2 6Sr*LTV^ 0 

[0 0 3 31 El 2 9 \%fry hEKSIE 2 ©BEn^MH 
tfSPl 2 5©P*fB^fil^S:^b-C*3t), EI2 8H 

y b&mmm 3 ©^h^h^sis 1 1 1 <om»t£m 

JSg;=Sr*LTV>5o SI 2 8*5<tU J EI2 9K^-tX 5 * 
SBSWTJI4. SEi^^e2©fiEW^III ; fTg|51 2 514, m 
«SP2 9 1, §«§C2 9 2, Sl©i*WlfB2 9 3, f 2 
©K^2 9 4, E^-tt^tiEgi5 2 9 5, fKSfflhM^ffi 
2 9 6, ^iElf ^^SB 2 9 7, 12 ©BfEl*«lfiy««B 
2 9 8, t»4Rfit*m2 9 9, mAffittflM*«|S2 9 1 0, 
A**««#!rtB2 9 11, fi«gB2 9 12 fc»*£>«!j&£ 

[0 0 3 41 tfeBE^« 3 ©^SE^JHSIffSP 1 1 1 & 
iSU 2 8 1 , g<f gp 2 8 2, SI ©SS#SB 2 8 3, S 2 
©»*a52 8 4, E^tt^iE$[5 2 8 5, BfEWtt^flS 
2 8 6, RCE{ff«ift^r«IS 2 8 7, ^y httB>J-7^trflS 
2 8 8, 1f#^g|5 2 8 9, UAflMtdfettgB 2 8 1 0, 
At>ffim&&M2 8 11, tti^jgP2 8 12, At>U2 8 

i 3, f rnmum m$*»& 2 8 1 a kfrbmm&*iz>o 
[oo3 5i e^T©0|J^{cd3v^T#^JlS5l : fT§^J^«^■t- 

^^©©^^^^^^©^fflV^iiEM^MS • «HE^W 
Sr3lfTi--5t©t1-^c 

[0036] [2. S1©*SSW *-T*5IM©Sl© 

[2. 1. fgSE^fe] ^y YXS.'f-'ry h©#^ffi«t 
E58»2©H*fflf«i:*>e>^y h3§tT^S^J:oT» 
m^tvSo h©^1t$BdSRSA^M«Bt#^{c 

[0 0 3 7J 
[*1 0] 

n = pq, X (n) = 1 c m (p — 1, q — 1 ) , 

r. t? l c mi4&/MHSSSc£3l-r) 

[0 0 3 8] 

[^1 1] ED=1 mod X (n) 
*Wc$tt5t#, (n, E) *'AMWtkh\~. DSr*f 

[0 0 3 9] ^y M4^y h#®1f $RD t SEig^lH 



(10) 
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-T?fc!K (C, n, t, L) fc#bT«Ei3# 

m^h l $n&<&m^x * (c, n, t, d =c d mo 
[0 0 4 01 mz.t£. d a &h2>m-%%k<om-%mb u 

[0 0 4 1] 
[*1 2] 

t : = (E, (D) , H (d,| |D| |L) ) 

©aigrfcSo ) 

^yh* (1) ibTS*-T5t, ^-Jr? hfcfflvy/fc 
^©^^^D^iS^-ffcC 1 ' mod nf*. A 
t> (C, n, t, L) fc»LTIEW*1t©B*rtt*d, 
l:±otE, (D) Sr*#bTIiE8li«1I«t«-CD*iaa 
U *©«*JBv^->tnftttB*©ttfc^y hfcittt 
t5i tlcioTL^fflcOE^ttSr^b, ElffiSfrfc. 
D<D«i:SrfflV^r|iE^«rt-eC 1 ' mod nSrW-Dt-f 

[004 2] d,ft-*lRlttBB»i: LT, 

[0 0 4 3] 

[SSCI 2] t : =D-d„ (L. n) 

[0 0 4 4] f^ybt±*4UaW-5i:, 
(C, n, t, L) iC*rbTDIcJ;S^F■§•'fbC' , mo 
d nta, C'C^ 0 -"' mod n Srtfgt-f-S r. h iz. 

L©*©^^t>D©|lteiEW#2©»«»rJ|t«rfffeS 

[0 0 4 5] fE£4*2©B*fllrttd.,fc (C, n, t, 
L) CTLTC mod n«rtM*-r»#»©^*< 

bv\, 

[00 4 6] Jfc*5 % «T©IIW#Jli©#l*|;:;}3V^EI 1 
9^*5lt5^^s'7'l 9 4^tt^r^*iii-t-S c bfc 
iJiot, ^^s/^l 9 4©^*B^Jl|S (Prove rt 

[0 0 4 7] [2. 2. «*fc*MB:/i3 J>a^] 
(BE9i«2*«FW-«r»o«3BI»ai©9 l ^y K HIS. 
019, 02 0) KT, ttBEBS tEEW«2 i©2*lS© 

«fflf«i:b-C5WEP»*ISri*o'|)©k-t-5. fc*s, EtTt? 

[0 0 4 8] ffiwtmm<Dfflizj$vz&u&3<Dmm& 

mi 2*5£Xfi®2 8fc:;j*U ^JlBSrUll 3(c^oT^Sq 
-TSo SEWS2©fl?^Srllll 2*5«fc Tfm 2 9 fc^U ^ 
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m*mi 9(c^oTtft^-r5. 

[0 0 4 9] JfeliEjgSI*, WBtim3ziit1&2 8 
WS?Cfc£/*Ltr, BEflMRfiMWU 2 8 7 KHE»r*-S 
31). r©C«, iB*lcfc|ffl bfcfitSrff 
l^J/abfcv^iassftJ&kftSo ^CttSL*t?S>S- 
i*«a*bV\ BliEflHRftttA 2 8 7{cfE®$ttfcC 

»8U^«mt2 8 8tfiy«S*i,TV^SttjDEL.J:5 t 
■t"*^ y h©WU-?-ni:Sr*fc»-C, 3!Hf SB 28 li 
5EW#2^aSflrf» 3 2) . 

10 [0 0 5 0] BE91<8»2H:, tttEB3a»g>3£4t£*Lfc. 

(C, n) §rg«g|52 9 2T?g{f bT, ffli«»2 9 
9fcJE«i-5 (^75'7'19 1) „ MR5MR1 2 

2 ltf^ggbT, htr^oTV^^Sr^l-.*. 

o*^ 3/^1 9 2) 0 fcffb. inmost- y hU* 
fc*v*£5*#»W©aU!J»ffi-ett, nt^ts^ 

£¥U/£1-5fclt-C;fc5o r ©»-£-<-«:. 2 
ti*5VNT^fiES3^6> (C, n) 3ri£.5i&Sra:fc < 
20 D , C fc* tt^tf+^-Cifc 3. i&Wyhi»oT 

v^ri as^H £ tux v » 5 m&iz r±. j*otv^ a>©¥U 

j£©3MW *3<t^f77'19 7t ) ^ 

SJ-fcS. ^yy*l 9 2 bT^fjSi-S 
^3' h£*Sfcftv^§£-»cfciu uy,#^?.RK^v-y h 
*»fc*V^i«r*5lci-S« (£©«£-!* 0) SrtS^b 
T\ ««fiaWS2 9 9fc|E«f*-5 (^77/19 7) . 
x'Fyy'l 9 2©«©fe*i bTStJS-TS^s' h& 
^f0^g-(C{i s f^ht, t£W#2©#)HP rove 
r s > f->Tv b#*Pt»«bSr$U®Igi5 2 9 1 2F*3K-fc3' h 

30 -T5 (^.Tyy'l 9 3) „ 

[0 0 5 1] ^fy/l 9 3&mfr£ti1tb. *Tyy* 
1 9 4§rHiS-r6„ r©*ffg©W^ft'5^^s'7'l 9 
4 ©BiMfe¥ffi*H 2 0 K'&oX®.W-tZ>o rt»tt«« 
J$ffl5 1 2 4 0|2(OrttWifi»»i>f)St*fflLfe*© 
*©W*9t imei, HcBJfiS*tT:v^S*SW!lllRi:Sr 
Jt«br, h««*©B»^i-e5W6T»fcS*>!WJEi-* 
^7^72 0 1) „ r©W«(ctt, sfraMMRi b-cl* 
T^©^-SrfE^bTVN5»^-|C{4. t i m e ^S-?:©^- 
T^J^SbTV^fitlSb-Cfet) , »LTV^»t*v«* 

40 ^ffcStfijmS. ^TSWWRirbrHI^WiiSJiW 

"*«lil»TB*«!l©l«HcJic»-*i»tf«6S!i-e*>9, Mtcfctufi 

bfe*g-ic« v S|l©tt3|[A2 9 3tt::)3V*-CR&, R = 
= C mod n©«t5(-tr^bT, W«^M9A 2 9 
9{d|a^-T5 (^7-^2 0 2) „ #{CR©r©tf^C 

se^S2©4 j ©^i©si^2 9 3x-r-<xnnv 

Tt> «tV'»/5S, 'f'v'y M^ s t =D-d t (L, n)©± 
5^cfl|^S4^-CV^-5^g•i-l*, C mod n©fM? 
50 «C t C ,w(L - ,,> mod n©i 5 fctf^fCt -5© 
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C* mod nSrBE^2<D^-T?»hWbT. UW 
mod n t &mW& 2 ©^gHt^fciirT t> tf »T?* 

[0 0 5 2] T.T-yZfl 0 1 t;i*SVvC5^r s> hS-MSbt? 

MftJWBl 2 l*»fegy»U"C (^fy5'2 0 
3) , Rfc^jc b*s*aJWWT?**»o*:i4:Sr«*r 
•Sfig (i©fij-ettl) Srf£/£LT. tif$R(fc#g|S2 9 9|c 10 
B«-*--5 (^^2 0 4) . irt^iOJrtSOW 

[0 0 5 3] ^f^/19 4*S^TSWct. t *T?-7 
19 3 -Cir y h- t. Prover s . L SrftJfflgB 

2 9 1 2d^e>^^i"S (^^s/^l 9 5) „ 
9 5 9 7^tT$^xfct», RSr^ff 

SC2 9 1 J;!3«lfiiES3— jUff-TS (^s»^19 6) . * 

&M1ff4fc 
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* [ 0 0 5 4 J $iiE8? 3 fcfc, g'ftep 2 8 2 (;i*5V>TfiESIl£g 
2*»feS6ftS^*:R*SflrUT, M«fMMl2 8 9lce 

0ct2> 3 3) „ R : =R B mod n Sr 

S 1 ©SlUglS 2 8 3 LT> ^coH-»^**5^|iE^ 

$fti£**fSS2 8 7-e!E&LT^5Ci— Stf-5*»Sr, jE^S 
14t£fiEgB2 8 5 -vrnfe-rz, {*Ty7\ 3 4) „ — get 

SB 2 8 1 2i!)Hi*t5. -&L#v^«g$Hfc$§^- 
fcfcSE3&8& 2^W£f-^y hSr^oTVN^i tdS^^tt 
fca»ofc©T\ rgggftj ffl**rttJ#«1 2 8 12 

[0 0 5 5] £t±««»BOl«*ite«t?*>5. 

[0 0 5 6] ^flS^JiiSr^B&l-IH^-rS^, «T<Di:*5 

[0 0 5 7] 
[^1] 



C7 :— rand 
send (C,n) 
receive R 
R :— R E m<ydn 
if C = R 

output ' 
else 

output ' M$h' 



Prover 

if time < L 

R := C D modn 

else 
R:=l 

[0 0 5 8] [2. 3. miOtt^v h=vKl 

(wees 3 *mwc*m^7m&mo?->r y k m 1 4 , 

Hi 9. 02 1) 4ftBE«3 j:iEW#2 fc©tt*©*fiS© 

[005 9] , ft 1 CD^iST'n [. n/MCOV^ifteS 
fcfc¥fc < , 2 ©KEBHffitt&jft©**!: 



[0 0 6 0] 09*.tt, mGE83#&£R»*l€r*i£-*-&1ff 
•SrafH-S^afcttfc, *mtttt8rBliEflMt&a*>& 

St?#5o L©*> | | L | | -C^fo 

[006 1] JB1©«*B:/p h3^©iWffi»3©*lHSr 

HI 4tc, liEWS2©#JiHSr|gll 9^^^ii^oT^ 

[0 0 6 2] &IES§3 tt, BBEffitt&Jljtffi 2 86 T?a* 
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mumm&mn2 8 7Kmm-fz> (x<ry7i 4 2) 0 

#!Jx.h£. r t t i m e <D^tt s C:=r | | time 
(OX 5 ic^Si-tbtf <tv\ «SU^Hftj$8B 2 8 8 ic|B#$ 

2/^1 4 3) 0 

[0 0 6 3] IEM#2©«Hi<0«tuH:^yy^l 93i 
^rt*«J©3S««4:iaU"C*>S« BEH#2tt:. 0HE8&3 
J^fcS&WSixfc (C, n) ^S«SP2 9 2-CSff LT, 10 
«*fia^SB2 9 9 9 1) 0 

^ bfft«F8Bl 2 l^bSLT, h§r«H>TV^ 
(^y^l 92) 0 h£r 

fiy««52 9 9fc|B«i-S (^7^19 7) 0 ttJ&T2> 

P r o v e r s , hf*Anttf*LS:-fe^ (;* 

*ry?\ 9 3) 0 
[0 0 6 4] x*ry?l 9 3^frS*bfc6>. **ry? 20 

2^1 9 4<D»ffl*^«S:BI2 liC*i" 0 CHtim 
eSriSW-rs {^Ty72 11) 0 r^ttffllcH:, 

[0 0 6 5] W*.tf* C*S2it»*aS*tTV^T, t i 
me©ISS: I I L | | lfs> h *6>tf* t i 

me:=C mod 2 llL|l lC J: oT^ 9 ttrt~r £ 
*C#£o *Ty72 1 lt?t i me §r&9 WUfck, L 

212), rowjeri, *«i<o»is«©^y y ^2 o i 

2iiRiLt, R:=C B mod n SrflS 1 <©»g8B 
2 9 3-eff*LT, 1ffttfttt«2 9 9 ICE**" 6 

>:/2 1 3) 0 **ry?2 1 2(D^*t LW?/ h^S 

*BM£L.T* fflf«««f»2 9 9te|B«fti-5 (7fy/2 40 
14) o ^n*-e*»l©*HS^n N=iyHc*5ttS^'7 l 
y^l 9 4(0#*B4#)H"e*>-6 o 

[0066] ^75-^19 4frmft£frtch, *Ty7 
1 9 h£i%tc t , Pr over s , LSrlWBS^- 

* (*"ry7l 95) 0 ^7^^195{)L< t±x*ry 
71 9 7*s«trS*bfce>, SS««B2 9 l!&»e>*BE»3^ 
RSrSHfiTS Uf5//19 6) 0 

[0 0 6 7] «BE«3tt, BEW*2*»e>2i«SttfcRS: 
SftSP 2 8 2 Lt, WttffibmB 2 8 9 dlB^i" 5 

(^^5/^1 4 4) o R : =R B mod n §r|g 1 CO 50 
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2 8 3 VW* Lt, r <Dttff)ltA^BIiEffir««j« 
«S28 7fc1B»SixTV^SCi:— SW5*^ lEStt^ 
BESR2 8 S^TO&T* (^^l 4 5) 0 — $ctZ>m 
-&»4BEK«2#3fiTS6ft^y h8r»otV^ii#«S 
ttfccO-C, ^W^^ttJ^^2 8 1 2d* 

«a*;«rtti;*jfl»2 812 a>e>tti;/rt-So 

[00 6 8] £LLjP# 1 <D*ffg^n h 3^-t?fc5 0 flE^ 

[00 6 9] &±<Dttm^im*ffimz.i&j£'t z> t . 

[0 0 7 0] 
1*2] 

C := raimdl|j4iinii© 
sesnd (C, 
receive R 
R := fl^modn 
if C = R 
output 7 ^£b' 

else 

ouatpiuitL ' 

P rover 

5fCmod2ll £ 'll <L 
R := C D mod 72 

R:=l 

[00 7 1] [2. 4. S2 0^7 fl nh3;u] 

X%-vm<D^try mi 5, Ell 9. El 
2 2) »2©»IS^i3 h^/l/TIi, liEK^JiH^-*5V^T N 
BEM#2*iS«-t-«IEH««H:, BIEfWIt^^HJ 
tTNFfc H«Wrt ttfc ffl^Wft W« L Sr^jp b 1t h (O 
fir, f^y ho^WftjcS^v^TWHHtbfct^iri- 

[0 0 7 2] r(D/a h=/^t?ttBEM«2d*e>tt|iE«3 
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[0 0 7 3] m2<DMfS^n h=/V©, &IESg 3 ©#Jffi 

[00 74] «ME»3 tt^-r W Vi^C »RfEW«^J«A 
2 8 6T?4^Lt, SSEfflf$Rft£fgB2 8 7^|B»-r-5 

fni4*LfcCHt)*T, ^ft«B2 8 1 J: 0 
2^i£m-tZ> (^f?'/15 2) ( 10 
[0 0 7 5] tE9J82©«y9©8fE*Ui« *#J©2*fg0!l£ 
^fy/l 9 3 4T?HIC-efc-5. SEM*2tts *feEE*3 
*»feaSflr*ttfc (C, n) SrS:«gC2 9 2tfgfllbr, 
*#«:«f^2 9 9(CfE^i-S (^yn 91),fl 
s> h»SMBl 2 2»SftbfcnKl»ifi:i-*^y hSr^ 
try hfiM9»l 2 1j6»6>»LT\ h*#oTV*S 
SdvfcWfr*-* Uf?/19 2) 0 *|fe©J»*fc 
U»«t«^y h«rJ*fc*V u^jKv;* 
RtcOSrfS^b-C, Wf««:^gi52 9 9(c|E^-r^ 
^1 9 7) o *«£©«*£ Lt^tS^y 20 
O^tCttu h t , tEM«2©#JWP rover 

3) . 

[00 76] *=ry7\ 9 3^ff$^/ct>, X-J-y? 
19 4Sr*fTi-*. ^2<0*f|S7 P d hn/W^jottS^T" 
y^i 9 4©*«©»J)B*^)lifcH2 2 fcfEoTRW-f 

Mi, Ci LT, fflftfcfi&ttffi2 9 9i£fleft-t-3 

(^75'7'2 21) , C iM©^©Mli, C : = C 
I |M|!lJ:o-C3fcfl-e#5. ^LfcC^o-C, Ml 30 
©S5£g&2 8 3fc*SVvrR : =C D mod n Srtf£ 
L"Cx W4MM«IS2 9 9KKfltt-& UfyT'2 2 
2) . rr*Tf*s, JB 2 ©StC^ia ha^Hliiatt*^ 

y^i 9 4©SMafc3MH-e*>'5. 
[0 0 7 7] x^yfl 9 4^*^T$tufcb, ^fj'T' 
19 3«?h U P r o v e r s > L Sr#6fc-*- 

5 (^fs'7'19 5). y -7 \ 9 5t>L<lixf? 
7"197 *Htf Sttfc fo. R Sr^ftSP 29U9 ifcfEtt 
3— SMW-<5 9 6) . 

[0 0 7 8] 4fe|iE8»3r2. mW&2t»t>mmZfrtcR$: 40 
SftgB 2 8 2 -egff LT. Ita^giJ 2 8 9 KlB«i-6 

(^TS'/l 5 3) . R : =R ! mod nSr^S 1 © 
mn&2 8 3"Cfl-J|EbT (77^15 4) s r©tfj£ 
3;h,fcR©±4fc©4fr!9*, IMEflMMiaWB 2 8 7fcHB«t£ 
*vCV>3C t— t Sr. jES^SEgP 2 8 5 -C^J 

(^f?^15 5) c — ffeLTV\mSR©T*fc© 
*fJ:»)MSrm»?tr3bT (^?^15 6) , ttWJ«I5 2 8 
1 2 J; 9 m^i-t-So — SLTV*fettfrtfEWI*2:9**3& 

S:St!*-*-*a*Srm^llSS 2 8 1 2 J:t) aWrfS. 50 
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[00 7 9] £l±&m 2 (Dftmyu h = /PT?*>S. *7 

Hi"* i: IW*U:» atKSrtWp-C*5J:5»^ j/*— S^Sr 
*IE*3^e»T»*<&. y*— 

[0 0 8 0] 
[*3] 

HtfJ: M (= L) h LKte'MW 

C := ramd 
Bsiad (C, n) 
receive ij 
J? := JJ^modw 
if 72 = C\\M 

output M 
else 

©u(tput ' 

Proven* 
M :=£ 

J2:= {C\\M) D mod n 
[008 1] [2. 5. *3©*HS:/n h=iyl/| 
(<£V^T©@$:#§!©^;/ K 11 6. HI 9, m 
2 3) SfS 3 ©jttagT'p b^/V-m, ?->ry hfc^LTBE 
Hi#2*'^raCttl'3l5«tB*»t>, hfUJBtefewr 
ttEE« 3 *rt«BEK«8©3S*f «rfr* 5 . rt*B6R1B©lE«f * 
ffftV^5**BE»3H:, **LSriEM-r<58«lf©1WM»« 
£#o 0 r©^fim«r^oWiE»3«r#HlfrMFoWGE 
#3 fcPf*. 

[0 0 8 2] «©WRW«fr^«Vx|MiE«3 h 

©*MSK48V^rri, rt«SR«©JC*f*EI5BbT^5' h 

©*3fttt**liEi-s r t So 
[oo83] mw^2tmr>ftnm&*gmn 

*BE»3«Tjea-f*ri:*<» #tt^o 
^SES3 i;©*fK©(Him ; &*JPSi-S«6«&*S.i-5 <> 
[00 84] ttfE«»3 ©Wt«rfiUE-*-**MWf«Sr 
(5, v) iLT, «MBE»3©W»f»«»!iS**^-S^I« 
If IBiSr (£. v) t-TSc fc«U £5 = 1 mod 
X (v) -efoSo num-ISf-try Hllib«*LfcB:. 4ft 
BE»3©W«flHi©45sWflMI (v, c) fc, l^g|5^flS-e 
IbS^^V^WJiRBtt i *5-g-*4v-CV^5 0 ^9J^.«, L : 
= v I I e I I i©J:$fc#W6LT*s#, *ivP*T,©« 
^©g^*^«>ixturv^«. L*»e>-?:ir-PiT,©ffif»S: 
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1 9{c^oT^Wi-^o 

[0 0 8 5] WEES 3 te, WBtim&tfm2 8 6 "C^-y- 
w^-^CSr^UT, MKfftttfttt«B2 8 7 KB*-*** 

Uf5'7'i6i) . ^selj; 5 ti-^^?/ bcomm 

*n i:*J*UfcCSr, * i: *>-C2SflHB 2 8 1 J: 9 IEW# 

[0 0 8 6] HE^2©toSI<OffiHtt^-7 i S'7'l 9 3* 
^tt*4W©#«g«i:RCT?*>S. CE9i#2»:. *£ifr8&3 
*>6aSfllS*t*: (C, n) Sr§ftSli2 9 2'T'SflLT > 
tft4MM«ffi2 9 9{cfESiW-5 (^fy^l 91).^ 
y hHSm^Pl 2 2tt£flrLfcnicttJS-t-S?-4-3' bfr?- 

5 (^^19 2) . MfcTZ?-* 

y b-Sr^fc&vvS^g-KJi, V-Xjff^RteOSrKJfcL 
t, flNRfi^$ffi2 9 9R:B»f 5 (^5-/1 9 7) . 

2©fiP rover s> f^y hft*Pf* #L Sr-fer 5/ h 
1*5 (^y^l 9 3). Prove r,©ty McJ: 
oT, L<t •? i t v t 1 SrStDffl-fo 
[0 0 8 7] *^y/l 9 31>mff&frti<b, x*r-yzf 

7/194 ©Rftl&^JIISrBI 2 3 Bl!EfflF«l^J« 
a!2 9 6^t^3tS:«LT > Iff 2 ©BtEttttft 
#g|52 9 8tee*?-3 Uf 5 '/2 3 1) . 

asfrrs 3 2) . 

[0 0 8 8] MOSS!*. x SrSftSB 2 8 2 -Cg{§ b 
T, 1f^ffi:«pgi5 2 8 9^fE®-T2. Ut^/I 6 3) o 

y hSrSfo"CV>&< T, R t bT0Sr^|ofcii;SrS:* 
•f-SW-C, r*83&j SrS*-T'5tti^*-W^SP2 8 12i> 
tttlALt, *ffS/a h=/USrPT-r€.o f*2©i*J|(ffi 

2 8 4(C*3V>-CW^#^^ p 
[0 0 8 9] 

[ftl 4] 

p \ = X 6 mod v 

SB 2 8 1 £ 0HM#2^aSfflr-rs (^fj'/l 65). 

[0 0 9 0] EE9HB2M:, p SrSffSB 2 9 2 T-glt U 
T, tMKft*tiB2 9 9lC|S^i-5 3 3). 

$ 2 ©jKff gp 2 94t? 

[00 9 1] 

1*1 5] 

p : = p' mod v 
S$2©»B«*ffia$»2 9 8fc|B*3*tT 
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S?Mfc: 1 Sr&JtLT, -tf^^f«P2 9 9tc|E»1-5 (;*. 

fj-7'2 3 9) . wzw&skb lt— sc-rs^t^*, 

MKO £19:56 LT, #^^2 9 9{C|S^UT 0*^ 
5-/2 3 5) , rtiaJ^ffi-K^FSP 1 2 A<D^2<onmkm 

Ish-fZ (Xfy/2 3 6) „ ^fy/2 3 6it<li 
7f?^2 3 9#£f?S*l,i/fce> % i„©ffi§:LJ:9#e> 
^fc±RSffii fcJfctW* (Xf jr/2 3 7) . ^fj-/ 
2 3 7 <Oitt55<D^i: LT, i .©ffltas i «T©#g- 
10 (4, 1 ©SSSLgB 2 9 3t?R := (C| |M) ' mo 
d n Srfhflt IT, fltttfi&ffl! 2 9 9 CHE^f 5 s» 
/2 3 8) „ ^7 t y/2 3 7<DJt^<Di^mt LT, * # 
V* i i £ *) Vvj#-g-fci;, rtftRffifi&Hfl! 1 2 

0) , f-fry h&WUl 2 tSrg'J^LT (x^s- 

/2 3 11) , R©ffi£l{Cfg;£LTffi»£:£f£P2 9 9 
}C|B®i-S Ufy/2 3 1 2) . SR3© 
*faS/o ha/WziJItS^-.y/l 9 4©8Ma>fe3MB-t? 

20 [00 92] fc*5, _h©R9iT»tt i .;9S%0#MKO fcRie 

i*/>*Jt«ELrv^«i^ x i „©%!«Mifr i fc«j£L 

[0 0 9 3] ^T^y/l 9 4 a*3!fT &*i,fc£>, **ryy* 
19 3-Ct?b t, Prover s , L Sr^KH" 

S O^y/l 9 5) . 95tL< «^^3' 

/l 9 7*i||^T$nfcf>, jgffifflS2 9 l*>feWBE»3^ 
R^iitS (^5-/19 6) , 
30 [0 0 9 4] ^iES3«, BE^#2*»e>aS«**tfcRSr 
Sff£t5 2 8 2{cSffbT, W#^gB2 8 9(C|E^-f-^ 

(^5-/16 6) „ R:=R' mod n 1 O 
Sl©ei5 2 8 (^y^l6 7) . r<Dfr^ 

V^Ct-JW««>t, E^14^liEa5 2 8 5-C^-TS 
(^5-/1 6 8) . -Stf6»frH:BEM#2as*S** 

^ffi^St^WUfcMSr, BE«#2*>6>Stt«lofc«f«li: 
L-C5t<JttlLT (^^5-/1 6 9) , HWJIH52 8 1 2*^ 
40 ^mtft^o — if:b«iV^»e■H:lE«H»2!P^^3»«:^s' 

StrJ^3Srtrl^gi52 8 1 2*»fottJ/j-r*. 
[0 0 9 5] K±*JK3©#1S7 p b h^/V-CfcS. tttt 
fr»o«E«l3H:»«>fejrtfc|g»[/2rt, N©^iE 
/SS^^S. *fc» 4**tSr»fc*V\tMlE«3T»'b % vxtf 

Sr«IIiE-C?#S. mm&3<DtiiJ]ifiO(D1%t?:i?D- 
50 5. 
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[0 0 9 6] [«4] 

SEES 

#**»li£-r5»«l»«: L e* e 1 mod 



C ™ rand 
send (Cjti) 
receive x 
p := X s mod y 
send 

receive A 
R~R B modn 
ifR = C\\M 

output Af 
else 

output * £K3b' 

Prover 

X := rand 
send x 
receive p 
p\r=i ff mod 

XP = X 

in *n + 1 

Af :=0 
else 

AT := 1 

ifi„<t 

H:= (C||M) D modn 
else 

free t„ 

delete t 

Ht= 1 

[00 97] [2. 6. JMwaffgT'ta h =>/W] 
(H**mB4EUR»ffl©^-^y K Ell 6. Ell 9, 
124) IS 4 n h^/^lt * 3 ©fcMB^n b 
=iA'K:4srt5i:n*»!:V'^#^^©^ia*Sr*JIRi-» 

[0 0 9 8] i CD T'n h=i/W-e(*^iIES 3 75^11^2 



[0 0 9 9] miaotf^s' KoaMTfc?-^ bf£ 

J: oT#3M4fclIl«i-S. 
[0 10 0] «m«3<D4MfrtttErStt*tfflFtt«> 
(5, v) «5J:rJ^Mffir«R«> (e, v) , *3-*yYffif& 



(16) 
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2 8 13 <£ K> AtlZtlX. A^)1t«^a5 2 8 1 1 (i|H 

[0101] *tl£g3 ttfMiEt*«£j*S|5 2 8 6 V- 
^C-Sr^/tfcLT, BfEfflttftft&tt 2 8 7 KlCfr*** 

^nfc^jftbfcC^ *iftTaSft«2 8 1 J:9EW# 

2^S£flrra Ufj//1 6 2) . 
[0 10 2] fE9l«2». WEE*3*»e>2MtStl,fc 
(C, n) *SMB«2 9 2-CSSfibT» flMR4ft*ffi2 9 

9(ciE®:-rs Ufy^i 9 i) c f-tv hmmui 2 
2 tts« L/t n ks**-*-*^-^- y h y vowm 1 

2 ia>e>8SLT\ ^-Jr-;/ btr^oTl^^i? 5 ^Sr^UJ^ 
■*--5 (z?^19 2) . Mlfc-TZ^-yiy hft-«rfc*l* 

9 9i^|B»i--5 (^r^l 9 7) . fc^-rs^ y h 
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2<D^JIHP r o v 



9 3) o 

[0 1 0 3] xTyfl 9 3^HfT^tufcf>. x*ry? 

1 9 4SrH^T-rS„ SMWfcffST'o h ^HcSSttS;*^ 
y^l 9 4©#JW*^«fcB2 4fcf£o-CWWi-5. H 
E*«4fej«aiJ2 9 6"C^YV'^i?xt*J*br % I&2© 
fNGEffigKKftffi 2 9 8 (^f?/2 4 1) „ 

Lfc x fr&fllflS 2 9 1^ P>tfefiES 3 ^i£«1-<& <* 
7 i ->7'2 4 2) „ 

[0 10 4J t»3ii, xSrS«SP2 8 2T?S«L 

t, ifa<%«p«s2 8 9\z.mm-rz> (^fy/i 6 3). 

xiLTO £r£<f Vtcm&te. 2 5, j, 

o-CV^jr<T, RtL-COSr^ofcitSr^-rso 
t?, r«Kbj fc*!*i-5aj*fctiWJ«2 8 1 2*>feW* 

Uf 5 '/16 4) . *i\ »2CD»»$(52 
8 4 (CtJV^TW^^^X p §\ 
[0 10 5] 
1*1 6] 

p : = X s mod v 

^UlttiSfeK:, |£2©?i&|?g|52 8 4t£*5V^ 
[0 10 6] 
Hfcl 7] 

p : = p 6 mod v 
SrH-^-TSo **rv?\ 6 4 {^ttS p ©H-gtt, ^<7- 
y h ©**©«* ^ffv^fcv^W^-lnttM :=lt Lt. 
h«flE*©3te»fttTV^V^*&'KH:M : = 2 b 

t, 
[0 10 7] 

[*18] * 

/0 : = x aw mod f 



* *Vf%\*X\jmkX-1hZ> 0 6 4-Cff^Lfcp 

5) o 

10 1 0 81 EW#2H:, p SrS-ffgB 2 9 2 t?g« U 
t, ffittftttSB 2 9 9 fcEftTS (^f^2 4 3) . 
f&2©J£*g|52 9 4-C 

[0 10 9] 

[ftl9] 

p : — p e mod v 
10 fcW-J* b-C, m 2 ©KBEttjftffilMFft 2 9 8 fcfBSikS i%X 
— Srl-SA^Jjfei-S (^f"y7'2 4 

4) . X*ry?2 4 4 ©*uj£©ig*a*— sw-s»s-k: 

fct, MfcO£«S^L-CflWI««r«S2 9 9KBftLT, F*3 
«MttBfiM$fV 12 4 KH*»;5*VCVn5;& * i .©It 
Sr-f^ y h-fZ> (^7^2 4 5) „ ^f^2 

4 4 ©«£©*&*#— & U*V 9 2 ©Jgff §5 
2 9 4X 

[0 110] 
[&20] 

20 p : — p e mod 1/ 

trU-SCUT, & 2 ©fBlSEffi$8**#lfl3 2 9 8fc«*fcS;h/C 
V5jc — S-TSd^lJ^rs (^7^2 4 

8) o xry^2 4 8 ©«*©!***«— SEtt-Sit^-lt 
14, Mfc0fcKJ£LTflMWft*rtB2 9 9{C|ES|tLT, ft 
SC^m^fgC 12 4©I2 ©rt^flB^tt&flfcfit&ih, 

9) „ 7? 2 4 8 ©^©ifS***— SLftVig^L 

i±, p« y ^mk: 1 srwaeur, tftttft&ftis 2 9 9 k 

lS®-r5 Ufyy2 411), XT?? 2 45fcL< 
30 I4^t 1 j/7'2 4 9. x=ry~72 4 1 l^H^T^ttfe^, 

i „©-»& l «t t) # e> tufciRsm: i t tm-r s ^ s> 

7"2 4 7) „ ^7S'7 , 2 4 70Jt|!E©^Si:LT, i „ 
©tt*5 i HTcf^ll, ^l©)»^gi5 2 9 3-CR : = 
(C | | M) 0 mod n£-«-3£LT, W«^gC2 
9 9!-IE®-r5 U7?7'2 4 8) „ ^7?/2 4 7© 

Jt^©ife*tbT, i„*s i £Vi>*:Zi<^m& 

R©fiisr i \z.wi.j£\,xm®.vmn2 9 9 t^iE^-rs 

(^7-/72 4 1 0) . ;:S«!i40MS/tih^ 
/UKtsn^xTy^l 9 4©fiMB*#«T?*>S 0 
40 [0 1 1 1] ^T^S'T'l 9 4flS!£fT£;h,fcib. ^fy/ 
19 3-ets/h Sttfc t, Prover s , L Sr^KH" 

5 (^^y^l 9 5) 0 XTyfl 95tL< ttXTy 

?*i9 7 frmnztitcb, $&mi2 9iti>hitm#3'^ 

[0 112] «EE«3»:, BE||#2*>feaSfll**vfcRft 
S^IS52 8 2I^SftLT, fi?«fiy$BB2 8 9{c|ES|fe-rS 

(•^ 7 5'^1 66).R:=R B mod nfrflffl 
m&®2 8 3-eH-^-TS (^5-/16 7) „ r©w-w 
IS*©±ffi©«r*, RiEW «»J«B 2 8 7(cfE^$n.T 
50 ^^Ct-ife-rS^Sr, 1^14^11135 2 8 5 "CWers 



(17) 
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(^y^l 6 8) o — Sfc^S»^H:|iEM«2*s*Sft* 

LT&9£BLT (^77^16 9) , tttfrtB 2 8 1 2 a> 

5fflAfcHi*«2 8 1 2d»e>tHA-*-5 0 
[0 113] K±*»4«>«e^P h^/W-Cfc£ 0 fg4 



32 



aS»ffiI-Ctt. XT -7 ^ 2 4 9 (D«t^)3S«^i- i D ^ i 

[0 1 14] 
[*5] 



C := rand 
send (C,n) 
receive x 
p := x*" modi> 
send p 
receive R 
R Jl F mod n 
UR = C\\M 
output M 

else 
output ' 4K3b' 



Prover 

X := rand 
send x 
receive p 
/>:— p^rnodi/ 

ifp = X 

i n := i n 4- 1 

Af :=0 
else 

pi= ff mod 1/ 

In 0 

Af :=0 
else 

Af := 1 

ifi»<* 

H:= (C||Af) D modn 
else 

H:=l 
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[0 115] [2. 7. m5<Dttm7v h=*/H 
(xtris-fH—Ymftri? K El 7, Ell 9, g]2 
5) tS5 0#B^n b=i/i/Tf|4, ^«*ofc|iE#l;:» 

[0 1 1 6] Sfc, — jRWftttBE^JcWLTfc^y h 

[0117] mmz<»&m*mfcfz><$m%Wi<D 

(8, v) *S«fcT*£PH»$ft© ( £ , v) , ^yYmh 10 

*«eL-C^S 0 |&5<D#fS:/p h=/V<rj^f£8£3©#JI[8 
SrHl 7l:a-3tHMU SEM«2 <D#Jii£EI 1 9lcf* 

[0 118] ^SE«3tt, »Kffif«l^c^2 8 6 "C^-Y 
wvj?Ct4*Lt, f&fI«$R«#gB 2 8 7tc|Bflrt-S 

2^3HIi-5 (xryyi 7 2) 0 20 

[oii9] nws2ti\ «tE»3*»e>asflr*^fc 

(C, n) SrSmSC2 9 ffittffi&«2 9 

9fcffi®i-5 9 1) o ^--fry hmm^l 2 

2 Lfc n tc*f J^-T * ybZ^yb 1 

2 la^gBLT, h«rJ*o-CV^Sa»i*5!&»«:W£ 
(^fjr^l 9 2) „ #«-f-6^y b«r#fc*V^ 
»^-tCtt, W^^^^R{C0Srl*SL-C. tt^«fa5 2 
9 9fc|E®^-S 9 7) . *fjcS-rS^s/ h 

*#oj§£-fc:H:, f^ht, B£H*2 0>^JHP r o v 
er s , h^JlnHf«LS"fes' M"S (^fyT'l 30 

9 3) . 

[0 1 2 0] ^-y^l 9 3&mn&thtcti>, x^y? 
1 9 4 &mft-rZ>o SSOStflgT'n ha/W^ttS*^ 
^/194 0>flMPft¥Jli«rBI 2 5 ic^ih, ^iEt*#^ 
$152 9 $S 2 <DfBiEE1f 

£fSB 2 9 8 dfESirrS (^f y/2 5 1) „ ^KUfcx 
&S^S62 9 ia»£>#tSE»3~2tra-f-S (^f'/7'2 5 
2) . 

[0121] &BE8S3 14, % SB 2 8 2 "eg«L 
T, HMftftttfff2 8 9KflBft-*-<& O^y^l 73) . 40 
X t l/T 0 fr£flf Lfc«^-«, BEWSI 2 ifi^-^r y V 

-e, ra&g&j srSc*-r5t±i^j^m^jia5 2 8 1 2a»5>aA 

Itv StfgT'n ha/Ut|Ht5. S&2(D^#fLg&2 8 4 

[0 12 2] 
[«2 1] 

P : = X s mod v 
fc± 5 (^7^17 4) „ ff@LfcpSr2l 

4HR2 8 1 i9BEW#2^ SSflW-* (^y^l 7 50 
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5) . 

[0 1 2 3] EEH#2I2, p £gffg|52 9 2-CSflTt, 
■C,. flMftfil*HE2 9 9tcGfltt-£ (^jx7'2 5 3). 
S&2©S53PSI5 2 9 4-C 

[0 12 4] 

1*2 2] 

p : = p e mod r/ 
fctUlLT, Jg2 0>»fEffitt{R^2 9 8(£Cft£*i,T 

4) . 5 4©»M^-St5i^i: 

{4. AtaRttfRttflS 1 2 4 ©SB 2 (DftffiiRflWMtfilSt;^* 

(^fj'/2 5 5) „ x<r*yy*2 5 4©^^*^— 
§feLft^4§£-t>L,< fit*? 1 y 7" 2 5 5dS*fT$^fc^>. 
rtfflBlttWWWB 1 2 4RH*«SiVO*5 i„©ffit Li 
D#fe*Lfc±R8|t i k*tt®.-rz> <,*7-y-f2 56) , 
^f 5 '/2 5 6©];fci!E©ig*i:Lt, i.ti^K 
fcV »1<DS»352 9 3-CR : =C D mod 

n frff-* LT, fflftRfttttt 2 9 9 {ClE^I" 3 s> 
^"2 5 7) . 5 6CDit«5^mi: UT, i„ 

t i a^L-V i»4r0(C^U-C &T?72 

5 8) , »l©Sl^g|52 9 3t? 

[0 12 5] 

[*23] 

n 2 

R : = C mod n 

•SrfWLT. 1MRfiM9&2 9 9KflBft-*-& (7f?^2 
510), r 5 ©fcfiS:?''** bn/W^JtS^ 

9 4«?PJW^JWC*>5. 
[0 1 2 6] ^y^l 9 4*S|ltT$tT,fcP>, ^fj'T' 
1 9 3 -C-fe h- t, Provers. L 

5 (^T5'7'19 5) , ^T5'/195'bU<^f5' 

RSr^l«i-5 (^^19 6) . 

[0 1 2 7] «liE^3tt, BEW«2^? 3 ii^i$ttfcRSr 
SMaJ2 8 2tcSffiUT, «$&i*fSfg|5 2 8 9 (ifE^i-S 

(^T^s'7'1 7 6) o R = =R B mod n 1 <D 

mmn 2 8 3 -vim i^xmrnsmts 299 KSEgrrs ^ 

ttll, rotf*^**s, 0|iE«4R«M«SlS2 8 7l£!S$f: 
$tbTV>5Ci— iH-S*>Sr, jE^tt^EEgC 2 8 5 "C^J 
(^7^1 7 7) . O^tt}^) 
SB 2 8 1 2>5>P>it|;rj-r.5 0 -SL^V^Ii, R : =R 
B mod n^^l(OSiatgB2 8 3-C^ioJcff-StLT 
{ff««M9ffi 2 9 9 r ©tf^)fe* 

a*. SRiiEffif«t*«f«as 2 8 7{ciB®$ixrv^^c t— a-r 

]Eatt*tE»2 8 5T?>WJti-* (^f ?^1 7 
8) . 7 8©i##-ftt6»^». iEK^ 

2©f^5'b >JS^<D**tc3i Lftifc Sr^-f-O-e, 1 
Srffi^ffl52 8 1 2^P>ttJ^-r^) <> ^^5/^*1 7 8©M 
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281 2a>e>awr*-£ 0 * h • Kt tt, b=i/v£ig/B 

[0 12 8] £Jl±*S|g5<D»Kro h=vl^*>S 0 — * [0 12 9] 

til*: Af € {l(^a),2(V^2K^^*JSfed5— feom&i tlLfc)} t>U<tt 
(5,1/) 

C ~ rand 
send ((7, n) 
receive x 
p := X* mod 1/ 
send p 
receive A 
11 :=i /l B modn 
ifC = il 

output 1 
else 

R := R E modn 

ifC = « 
output 2 

eke 
output 

Prover 
«/||e||i := L 
X '■— rand 
send x 
receive p 
p :— p*modv 

ifp = X 

«„:=<„ +1 

else 
ifi n =» 

in -=0 



else 

R := C D modn 

[0 13 0] [2. 8. ^6©*f|g7 p ci 

19.H12 6) Z<0&WK&ttZ>m6<Dttffi-7o h=»/V 

5> 0 50 



[0 13 1] -jRtt^ClMiE^KJB-U-Ct^y h<E>*$J 
[0 13 2] iW^tfST'a hrvp-cft, ^BE«3*»e>pr 
[0 13 3] ttlH»3 0tt4tfrfttE^54raffi«La> 



(20) 
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L i tt-&tfi^5* s *V\ IS 6 CDfcffgT'cz 

<£>*£|IE£&3(D3M!&01 8tc, SE1I3SS2 ©fMHSrEI 1 9 

[0 13 4] ft8iEtt3tt:, VEEfflrff^jAff2 8 6T?ft 
W^CSr^fftLT, KfiEfflf««^SS2 8 7 HUES?-* 

(xfy^l 81) 0 ^EELi 5 b-T&f-iry h©gfcS'J 
fni4*LfcC*. *t#>-Ci£fiSlS2 8 1 H9mm# 
2^mm-tZ> 82) „ 

[0 13 5] SE^S2«, W0HS3*»e>aHtS*tfc 

(C, n) &gmgB2 9 ««ft»9i2 9 

9jcia^-rs (^^s'T'i 9i) o hmm&i 2 

2 Lfc n &.Ml&t&7-tr y V Sc*?* y hteWU 1 

9 9iz.mm-rz> o^y^i 97) „ n^-r^^-y h 

SrJSrol&^tcMu h t , SE8B:»2©3MHP r o v 

93) o 

[0 13 6] ^s^l 9 3^H=fT^^fc^, 

1 9 4 &mn-rz>o h=*Mz&ttz>x.T 

y-71 9 4 OffjM^IHSrB 2 6 icflEorRWfS. IS 
Mffif*^^ 2 9 6 V^S? x 1$ 2 <D 

mammfimm 2 9 8 cows ur 5 '7 , 2 6i) 0 

*J«Ufcx*r3Htl82 9 l*>fe<ftlE«3^aSflM-S (* 
=ry72 6 2) „ 
[0 1 3 7] #lEg3tt, %£:SfiSl52 8 2"?3:ff L 
T, flM«ft#MB52 8 9fc|B«k1-* (^^18 3) . 

■C, r«S2&j =SrS*-r^m^?S:ffi^gB2 8 1 2frbMti 
LT, »B^b h =/WSri^T-r So A*Jg& 2 8 1 3 J; 5 
A*SKTA*flMRfia«B2 8 1 1 fc^fcfE^Sft-^ 
fc^S't-i? /J SrfioT, SB 2 ©S3ttffl3 2 8 4fc*JWr 

[0 13 8] 

[12 4] 

P : = (x I I *0* mod v 
fcW-JW-B (^y^l8 4) o tfStbfc^^^^^p 
Sr36«»2 8 1 J:DBEW#2^36m-*-* (xf 5-/1 8 
5) o 

[0 1 3 9] ttE9i#2«\ /> SrgrftS^ 9 2-CSftL 
"C, fft*ftttffi2 9 9&flBft1-& (^^2 6 8) . 

m2<omn®>2 94? 

[0 14 0] 
[12 5] 

p : = jO * mod f 
Srtf-gtUT, ffittfjftttfft 2 9 9 iC^&ctZ (X'ryy'2* 
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* 6 4) . ft 2 ©BfEffi fM&JSSB 2 9 8 JclESf^ftTV^ 

(^7^2 6 5) o Xf S '7 p 2 6S©IJffi©W- 
*UfcVv|§£-fctt % rt«Httttfi&rt|S 1 2 4 (D^amm 

«B 2 9 9 KHEftfS Ut-^2 6 13). ^v L y72 

m tti Lt, i „<D*fiIS: i „ : = i „- /u © <fc 5 

10 Ufy^2 6 5) „ M : =0 I I i „§rfS:5£ 

LT, fflNftfi&rffi 2 9 9 fc|B«rf-S (^fy^2 6 

7) . i.*S0J:t>/hSv*»!filS-r5 Uf?^2 6 

8) . 0 <fc ►)/he$V'»SHHcWu 2 4** 
t>i„Sr»PfebT (^5-^2 6 11) , f^yhM 
gfll 2lHt (^t 1 s'7'2 612) „ V^f 
ncD#-a-Ct>. 1 ©SSggB 2 9 3 TR : = (C | I 
M) 0 mod nfcfWLT, flmffiy**J2 9 9fcl|B 

(^fyT'2 6 9), r r*-C*s^6<05iSfig7'n 
h=/HC*iJtS^-7 i s'^'l 9 4©i¥JW*#J^-efc«„ 
20 [0 14 1] XT-y^l 9 4«5|^fl$tl,fcf>, yy* 
19 3 TMr ?/ h £*l,fc t, Proves L SrflfBfc-f- 
5 (^•^•S'T'l 9 5) „ **ry7\ 9 5t>L< \i.^<Ty 

RSrMft-TS (^fy/19 6) o 
[0 14 2] MEE«3»:. BEW»2*»?>aS«SttfcRft' 
SffgB 2 8 2 tiSff LT. 2 8 9 fcflBft-f £ 

(X^S>:/1 8 6) „ R : =R E mod nSrftl© 

2 8 3 -cw-jit \sxmm&&u 299 ice*-*-* 

(^y^l 8 7), r.©tHMS*©Jiflr©***» 
30 W^^FStS2 8 7lciE»£ft-CV'»5Ci:— gt-t-5»vSN 
jE^14^iiEa52 8 5-e2)«lJ^-r5 0 — 

s/^1 8 9) , W^Si52 8 1 2*»feWA-***. 
V^*&^*, TMSbJ ^m*i-^ttJ^Srffl^Sl!2 8 1 2*» 

[0 14 3] Et±*sSf6©S*e7'o bn/>Tfc6o <feBE 

try Kcio-C^^^-^OD^StcD^^tlSr^t^-C^ 

[0 14 4] 
[317] 
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All: & 



C := rand 

send (C,n) 

receive x 

P ~ ixWl*)* modi/ 

send p 

receive R 

R := R E modn 

if R = C\\M 

output M 
else 

output ' JK&J' 

Prover 
X ~ rand 
send x 
receive p 
p ~ ff mod v 

if? = X||/« 
in'— *n — f* 
M:=0\\i n 

free i„ 
delete * 

else 

M := l||i„ 
R := [C\\M) D modn 

[0145] [2. 9. ^7CD*f|f§7"D h=VV] 

8, 019, 02 7) iO|gKl^lt5S70»f/ci 

[0146] meoMm^r* b^sutmrnK, — 

[0 14 7] nro^lST'a *fetfeg&3a»£>'i>r 

[0 14 8] &5fc8i3cD#«£ifctiE^5#®ffl$«(£> 
(6, v) *5<fcl*fcPHim<P (e, v) , ^yhift 



[0 14 9] <REEJ*3ri« fM£fflHk£j£tt2 8 6fft 
40 C 3rdfc£!t LT „ BfEffi ttfitjfrtt 2 8 7 {ciE^-f 5 

(^5-/1 8 i) „ ms.vx 5 t-rs^s/ hcogRgu 

^nfcgjfcLfcCfc, *t«>T^ffgp2 8 1 J:QEE9I4§ 
2^Mff-r5 (y^s^l 8 2) „ 

[0150] mw®2i^ mwmsfrh&m stilt 

(C, n) &%im&2 9 2T««LT, fif $fttfc£fg|5 2 9 
9(C|E«Hi-5 (^fj'/l 9 1) o 2 

(^fy^l 92) „ MIST Zf-lry Hfc*rfcfeVN 
50 l^jtf^RtcOSrfS^LT, ffif$R«^SB2 
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9 9(C|E»-T5 97). MtSf^ry b 

SrSfoii-g-tCte, b- U SE^2<D#)lIBP r o v 

e r s , h#^P««Ltr-fe-> h-fZ (*X5x7"l 

9 3) . 

[0 15 1] XT-y^l 9 3*5^$^^^ ^y? 

1 9 4 zmm-Zo w,i<r>n^xx h=*Mz*mz>x<r 

lHt«^SB2 9 e-CftV^zSr^LT, I&2C0 
BEEfflNftft&«|S2 9 8(C|E»-f-S (^75-/2 7 1). 
^Ufcx*3lflriB2 9 1 3 ^SlflH-* (J* 

7^5x7*2 7 2) „ 

[ 0 1 5 2 J ^H^3 % ?rgma5 2 8 2 tSIIL 
T, 1INftftttffi2 8 9fcffi»f 6 5x7*1 8 3) . 

otV^<t, Ri U-COSr^ofcr tSrSc^-t-Sco 

•e, r*g%j sr**-*-sa*sraiAaj2 8 1 2t^mtj 

L-C. ^IST-n h A^SP2 8 1 3 <fc (9 

A^^nTA^W«iS^2 8 1 1 (c^fcia»$^-CV^ 
tc* y-b— *?v SrttoT, 2 COgSjftgB 2 8 4{C*5V^T 

[0 15 3] 

»2 6] 

P : = (x I I mod v 

£j£fig|52 8 1 £*)mW&2^mm~tZ> 
5) o 

[0 1 5 4] UW&2^ pSrSffgB2 9 2t§f L 
T, If $M*J$!H$ 2 9 9 (^9/2 7 3) . 
^2CO»Sigp2 9 4-C 

[0 15 5] 

[*2 7] 

p : — p e mod v 
fctUfLT, flfttffittffi 2 9 9 iCGfti-S (^t^T^ 
7 4) „ M2CO^!iEt»a^a52 9 8(C|E®^nTV^ 

(^5-^2 7 5) o ^7^/2 7 5 COWfecOjjgma 5 — * 
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*&L^V>*g-(cf4, P^SC^flg^gB 1 2 4 CO® 2 cortgp 
m&VMftmvemZiiX^Z* pis? i D <Ofit£f Uffl b 
"C» ^yt-i?iLTM:=l | | i .^f^LT, ffi 
««M«ffi2 9 9HEft-*-£ (^75'/2 7 12) „ ^ 
5x7*2 7 5 0>We©lB*as— SrTS pCOT# 
co^^f>AtS:Si»)taL.r, i n co1ttSr i . : = i .- n CO 
J: 5t-^-r?> U7-7/2 7 5) o M : = 0 | | i„ 
SrtS^ LTv tt«fi^«A 2 9 9 {zmmctZ ;x 7* 2 

77). i „*s 0 XQ'hZ^frWfe-rz (^7->'7 , 2 7 
10 8) . 0 «fci?/h3^4§-S-l;ii4, i.-SrOK^-TS 

7^271 1) „ ^-rituDm&nh* mi<om»U2 

9 3 XR : = (C | I M) D mod n^fULT, 
«*«»fB2 9 9fcBB«^-S (^75-/2 7 9) . 
*-CdSSf7cO*f|£7°t3 hn/HC*5tt-5^v 1 s'7'l 9 4 co 

[0 15 6] ^fy/1 9 4#t3Wf4*l./tfe, ^75-^ 
19 3 -C-fe 5X b t, Prover s , L frflfBfc-f- 

-5 0*7^ 5x7*1 95) o ^T 1 5x7*1 9 5tL<li^T5v 
7*1 9 7asH?T£*l<fcP>, SSflra'2 9 l*»fe«MBE«3^ 
20 RSrj^ft-f--5 (^^-5X7*19 6) . 

[0157] mm3tt, uw&2fat>mm£ivtcR& 

SffgP 2 8 2 K&mvx. t»$R#M$gB 2 8 9 (cfE^-T5 

(^T" 5X7*1 8 6) „ R : =R E mod n SrgS 1 CO 
«#g& 2 8 3 -CtHI LTtt«ftj»1 2 9 9 (CfB^i-^ 

(^^5x7*1 8 7) o rcotf^*co_h^co^s, mm 

ffi%H%n%?>2 8 7 iz&mZiiXV^ZC k— WcTZfr*. 
jE^^EEgi52 8 SX-mfe-fZ (^t 1 5x7* 1 8 8 ) „ — 
§6:1- 5 RC0T#<£>#r^P>M£rEl«JttiLT (X^r 
5X7*1 8 9) , ttl*SB2 8 1 2frbmtr?Z> 0 

30 v^^(5± x rM^j ^Mm-r^m^^m^U2 8 1 2*> 

[0 15 8] {JLtriSSS7cO*|-fS7*P h^/V-e*>S 0 

[0 15 9] 

[*8] 
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<7 rand 
send (C,n) 
receive x 
P— (xlWmodv 
send p 
receive R 
R := iE E modn 
if R= C\\M 

output M 
else 

output ' M%h f 
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Prover 

X : — rand 
send x 
receive p 
p:= ff mod v 

in := i n - P 

Af := 0||i„ 
if»„<0 
«« :=0 



M := l||tn 
Ri=(C\\M}°modn 

[0 16 01 [2. 1 0. S58<D*ffg^i3 

mwrnm?-* y b -*«ifls • &v\k ui&s, m i 6 , 

12119, 0 2 4) r©»91fc:i3rt** 8 ©anemia h = 

[0 16 1] 4ttE«3 04^^SE^SttfkflMB£> 
(6, v) tt.J:tf&HHMR«> ( £ , v) , ftrvVmih 

ommt&f&nirzofrZ:, mmzv>Atsn2 s 1 3 

J: 9 SJlT, A^JtimifcfSgB 2 8 1 1 te|E»$*VC 
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[0162] &B£8S3tt:, BfiEflM*£j£*|S 2 8 6"eft 
WVi?CSr4j*Ur» MIEW^«^fgi5 2 8 7 fclE**-* 

^•n£dfc£jcLfcC§r, * t feTSHigp 2 8 1 <fc 9 mm» 

[0 16 3] fiEWS2tt, «MBE»3*>fearf9**u/t 
(C, n) £-gff&i5 2 9 2T§iLt, flMLfi&reiS2 9 
9^|5®-r5 (^y^l 9 1) . h£R#ffil 2 

2 l*gff bfc n izttfe-T 5^<5r y h * htfc£fg& 1 

1"5 Ut^^I 9 2) „ MifcTZ^^iy h&ntc%^ 

m^a-z. v-^^^^Ricosrta^ur. «ttOM«iP2 

9 9{CfE«Si-5 (^y^l 97). W&-fZ>frv V 



2©^Jl[gP r o v 



50 er s > bWAPWaL-Sr-fe^ h-TS (^y^l 
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9 3) o 

[0164] X^ryyi 9 3^mn^thftb, **ry7 
1 9 4 &mfi-fZ>o f&8©*ffg7"cr h^/Hc*3Jt5^x 
y-7\ 9 4©»JW*#JHSrH2 4t«orRiBi-5. IB 
IEtil$ft£j£g|5 2 9 S2© 
KfiEflMftft^2 9 8(cGSr*-& (^f?/2 4 1) . 
£j«bfcje«:2SflWS2 9 1 a>MME83 
f^2 4 2) „ 

[0165] flffiEJgS tt. x SrSff SB 2 8 2 -egfL 
T, 1imfiitttt2 8 9fcB«rt-<5 63) „ 10 

x t LT 0 fcftfll bfc»S*J:, SEWS 2 y V Zft 

o-CV^<t. R t UXOSr^l-ofcr t SrSefc-TS© 

m®i &x#nr&m*i*itvji&2 8 1 2*»6>a* 

■f* -5 fi^ : = 2 t Lt, /t ©-ttSrA^SB 2 8 1 3 
XV ^*TA#W«ffiy*»2 8 1 l(C|E®:bT*5t, £ 
2©S5»^2 8 4(C*3Vn-C, 
[0 16 6] 

[*2 8] 20 

/0 : = x" i mod u 

h VTUXtfl/x pfrmW-fZ c tt 

Jit bfc p SrSSflKB 2 8 1 J:5BEW#2^ &flT*-<& (x? 
?/7*l 6 5) „ 

[0 1 6 7] HK2§2ttU pSr§fa2 9 2-C§tL 
T, If ttfttttt 2 9 9 (^f?^2 4 3) . 
m 2 ©?£lEg[S 2 9 4 -C 

[0 16 8] 

[t2 9] 

p : = p° mod v 30 
*tH*bT» £2©BREfmflMTO2 9 8lcB*£JvC 

4) o ^T-y-7'2 4 4 0fl)l©ig^- grTSS^H: 
^f^24 5©tt*>?H^ Mfc 0 SrfS^bTfit 
gC 2 9 9 (ClE^-r S« ^5-/2 44 ©W^©3|***s— 
&bfcV>#£-l::tt» £ 2 ©»»«B 2 9 4 T 

[0 16 9] 

[*3 0] 

p : = p" mod 1/ 
ttW LT, £ 2 ©BfEfflKftttffi 2 9 8 fclE*S*vr 40 

— Sr*-**^^* (^f5'7'24 
8) . ^5-^2 4 8 ©We©*****— Jt*-3»&-tett 
^fj-^24 9©tt*>t>{::. rt&RflBfittttffi 1 2 4 Oft 
2©rt««ttfia^Kl«l»*^TVN6*i>^ i„©tt 
«r0£l*©1t 1) tcfg^-rs,, 7f->-/248 

©^©JS***— ffebfcV^fra-Kirau * -y±—VM\C 1 
SrRjSbT* W«imffi2 9 9IC|B(M-« 
411) „ ^th<DWs£>^^^Xhm^*7-y-72 4 7 
©fU^Ul. i.<Dm i 0X'3bZ>t>*mW1-?>o i„©fi£as 
0O»^tt, Sfl©S5i?lfC2 9 3-CR : = (C I I M) 50 
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0 mod nfctWLr, W««1W29 9fcB*r 

5 (^fy^2 4 8) o i.^O-e^V^-a-tt, RcDfit 

6 1 lcW>M bTflWS<ia«B 2 9 9 KlEgrrs ^ y 7° 
24 10) o z.zt.X'fcm8(Ott$£-y*v h3/n^*srt5 

^T5'/19 4 ©SMffl!fc3MH-?$> 5 C 
[0 17 0] ^r?7'19 4^fT$^f)« T.'ryT* 

1 9 3 "C-fe b SfWfc t, P r o v e r sv L &8?l&-r 
5 (*:r 5,7*1 9 5) „ y^l 9 5 b< fc^^y 
7*1 9 7*!|ttTS*b/te>, SIOffi2 9 l*»e>«ISE^3^ 
R«ri@Hr*-5 (^fy^l 9 6) „ 

[01713 tfetiE^ 3 f*. BE»»2*>e>afHl*iT,fcRSr 
SffiSS2 8 2(C^flLT, {ff«fiM«filS2 8 9i£fE®-f5 
66)„R:=R B mod n ££ 1 © 

m&%2 8 3-rrw-Jlii-* ^f-^16 7) 0 i©tfj? 

a**©-^©*?**, BtEfMfttttttt2 8 7lce«Sivr 

V^Ci— Sci-S*»Sr, 3ES'tt^ltiEgP2 8 5-t?fU^-r-5 
(^fy^l6 8) . — Stt-'*»^B:|iEW«2**3»* 
^■-5 r s' bSr«?o-cvsr.t^$*tfc©-e, R©T<SE© 
#?<}:>? St OHiLm, ■EW#2a»e>gr*»ofcflrai: 
b-CISl *) Hi bt (^^5/7*1 6 9), W^JgP2 8 12^ 
e>Hi^-f-^o — 3b*vM§£-»4, W*IS-C*faiKb*:» 

*H/£*»ofc©T?, r4*3bJ Sr^*i-SHi^SrHi^lEI5 2 

8 1 2*»e>a/>-*-s. 

[oi 7 23 &.±t,ms<Dmm-7°n h^/^fes, 

i .©Was IteKJt 5*1,5 fc, DSr5WfflbfcV'^sK 
£i£ff < 5 ©TN ^ 5, b (DM&ik h f£ 
5. -JfjWfflbfc6>«a»fc**^--{ry f^yh© 

*7*o h^/wasjfiffl-etSo 

[0 17 3] 
[*9] 
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A*: p (1: 2: hOftttfls) 

C := irsiimd 

/) := xf* mod a/ 
s©nndl p 
jr<BC<sSv<B R 
R := JJ^modrc 
SffJl=C||M 

©Eg© 

saimdl x 

M := 0 
el©© 

p := fp mod v 
M> = x 

« tt II 
©is© 

. M:=l 
5ffs"„ = 0 

(OjlAr^nttodfj 

J2:= 1 

&CBS 

[0 17 4] [2. 1 1. m9<Ottm-7v h=»A/] 
(^■Jr? hfUJ§©liE»©£fik 018) £©$SWKl*St* 

ttEW*2|c#LTfriteo*:«tEO|iaiaitaii-r 

[01753 *#B^ , B h a^tratMiEWS ©fBtEflMfl 

ior^-rV>^CSr4j*-*-*ifci: % (r, R) frft 
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[0176] 4MGES3 OWIt«|lE-r5««fflf«© 

(8, v) JB6©*MB:/n hn/ufciacT?*>*. US 
9©*riS7'D haH, Ell 8<Dmu^3<D^m^Mm 

©A#g|5 2 8 1 3 <fc 9 A# Stl/C. AAflMMMetB 2 8 

1 ltciE^ftTV^i-r-Sc 

[0177] BfEfff*£&& 2 8 6 » a* r & 

10 £j*U ^rHtrC : =H (r) ©J: 5 fc— #fattM*fc 
ffiLT^V-^CSr^JifcU »SEfflf»»J#g|J 2 8 7tc 

h©$U3i|^n idly&LfcC-Sr, * t frXxMBU 2 8 1 <fc 
9IE?B#2^SS<r*-S (^s'T'l 8 2) . 
[0 17 8] BEH#2*>e>ai6>*tr*fcx*, gffSP2 
8 2-CSftL-T, 1f$R«^SP2 8 9 IcC**** O*? 1 * 
7*18 3) . % t LT0S-SmLfc^g-[i, SE9l8g2j&* 

S*1-5©t?s r#ss3»J znv&-rz>i$t>*Mt>U2 8 1 

20 2*»6>W*bT, «ISyo h3^«r»Ti-*o »2©» 
8 4j£:*3V>TV';*#>'*p$-, 
[0 17 9] 
1*3 1] 

P ■ = (X I I A*)* mod 1/ 

««5 2 8 1 «t *>mm&2^ mm-rz 

5) „ 

[0 18 0] UW&2frbmiS£titiU?.7iii/xRfrg: 
«g|5 2 8 2 fc5Ht Lt, 2 8 9 KStt6 

30 (XTyfl 8 6) „ R" mod n SrgS 1 ©j^SB 

2 8 3t?tHM-* (^7^18 7) . £L©t]-JMS*© 
Jbfft©«T/5S. S8SE«»»«pep 2 8 7 {CfES^tLTV^ C 
i:— Srf"6*»«r, :£3ttWffi«2 8 5T?TO£-*-S 
s^l 8 8) o ^TyZ/\ 8 8-C— S:L.fcm^J4, * a 
y-?\ 8 n?£/*UfcS#r i, 8 6 THAT* 
«#Sg&2 8 9(c|B^bfcRtSr«a(cbT, fU£JK»tlHR 
«#«2 8 1 4fcW**-.5. Sfefc., R©T<£i©#T<fct> 
H9fflLfcMfr. !iEWS&2a><bg»tJ&ofctif$&£ 
•JtbLT (^fi'T'l 8 9), mt)U2 8 1 2*»?>ttJ* 

40 i"5o ^■XixT'l 8 8-C— ScL**»ofc^f4, r*s 
S&J Sr#*i-5tb^3Sr(U*SlJ2 8 1 2frbmt>-rZ>o 
[0181] «±*SiS9©*f|g7'P h^/wSr, 018© 

[0 18 2] ffi,S,#^< C©±p*C x fu«#tf^aA 
CtJPM0) h©J^«*J(lfraF**» ftSA^^ 

try h<D t $m%KMffi&Wi : 8*-<0'?-y-y ^Sr^#^v^U 
tt««^-*^:V^5^BMt©^^!' h©*SI*«)ei-S. 

50 |Bfc3iv>fl|«Hfli«r<KJfe*Tfc^y h©»«**gi"T? 
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(26) 



11-31204 



[0 18 3] ftABEfliflM«fttta2 8 1 4fCflBflt£*l,S 
A^J: J* 

fcB;fr: M *fcf± invalid 



50 



[0 18 4] 
[*1 01 



r :— 
C := H(r) 
semdl (C,n) 
receive x 

P •= (xll/*) 4 mod" 

sesmdL p 
receive JJ 
6frjJ E modn = C||M 

output M 

arftor® (r, A) 
else 

©lafcpmit SiavsilSd 

[0185] [2. 1 2. fgl 0<Dttm-7v ha*] 

(-tv^—wsaaio^y^ k*— Kails' mi 

8. 1119. 02 7) 0©*tt£7' 
W^Wc^W^. m9<OffiiE-7'n h=*M£j$tfZ>s #tt§r 30 

[0186] mm^3<Dmm^mitm9<D-^vj 

[0187] £tE*g 3 W#*gS:<%tEi-S#^lf Wl<0 
(8, v) *5£tfj*Plflm<K> ( e , v) , f^yHWl 
«*Ltt||*6©#flS:rn ®10O 

A-ti^c-e^s. &m&3<o^m&mi stc sews 2 

©^JHfcm 9fc**i^ft«oTI&rai-.5. 40 
[0188] KIEtiMft&j&as 2 8 6 fUR r Sr 

U BBEfflf«<!H<SSB 2 8 7 (ClE^S O^s/T'l 8 
1) . m£VX5k-r&?'1ry hoWfflfrn k±)&Ltc 

(^fyT'l 8 2) „ 

[0 18 9] BEMS2W:, *feIES3 a»S>3ire£;h,;fc 
(C, n) £gftg|52 9 2T?SfLt> W»8|!2 9 
9{-IB®-TS 9 1) o hSigtfVl 2 

2ttS«bfcnK:*tJ*:-*-5^y bSr^y bfii»»l»(50 



■f"* U^s^l 9 2) . WiSTS^-Jry hfcJSfc*^ 
3§-£-(-l±. u-^^V^RtcOSr^bT, W$8i£J$aS2 
9 9(c|E»-rS (^f^l9 7) „ 
&W-om&ia^ fr y V t , HEKS2(O^JlHP r o v 
er s > f-frv httiiqflMRLfc-fcy O^s^l 
9 3) . 

[0 19 0] ^fy^l 9 3^fr^ttfc^, 7*7- V? 

f?'7'19 4 ©^JW*#J(SttB 2 7©a^-?*>£. BSE 

1E«««#MBJ2 9 (^y^"2 71) „ 4 

J*LfczSr2S«fflJ2 9 l*»feW!E»3^a6«f * 

■y72 7 2) „ 

[0 1 9 1] KSE«3»:, xS:S:faSB2 8 2t?g«b 
t« 1»«^SP2 8 9lC|E^-TS (Xfy^l 8 3). 
% h LT 0 fcgflr Lfc^fct, fjE9B« 2 y h 

-C> r«t»J «r*Sci-5W*ttfl/J«2 8 l-2*>feW* 
LT\ »B/d h a/VSri^T-r 5 0 A^J^ 2 8 1 3 <fc 9 
A*S*tTA*«««JWlJ2 8 1 1 (c?-fe|E^$ttTVN 
fc^->t-v'MSrffiot 1 m2<Dmn&2 8 4(i*5VNT. 

[0 19 2] 

[ft 3 2] 

(O : = (x \ I mod v 
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&$tn-rz> 8 4) „ tf^ufcw^^v^p 

^WSU2 8 U 9IIIM»2^aS«i-* (*^;y:7"18 
5) o 

[0 1 9 3] SE^*2{*. ^SftS2 9 2fSffiL 
T, 1MRft&fflS2 9 9(C|H®i-S Uf?/2 7 3) „ 
m2V>&&U2 9 4"? 

[0 19 4] 

»3 3] 

p : = p* mod v 

£H-|?L-t\ flMR^ffi 2 9 9 (xyy^2 

74) „ m2e>mmm%L&i?Ti&2 9 8\z.mmisivx\,^ 

(7fj/^2 7 5) . *.*r-y72 7 5 ©¥tlj£©JlfeS:;9 $ — 
ftL*V*»#»::tt:, y y-fe— LTM : = 1 | | i. 
Srfft^b-r, ffif 2 9 9 (cfEgSrt-S &Ty?2 
7 12) „ ^f?^2 7 5 ©^J*©^*;^— &1" 
Kli. 7s*ry72 7 6 t^f^/2 7 7 ©ft*? •> o 
©T4fc©«*»e>n fc*9ttlL-C, AA*««iMB2 9 1 
lfcEfttr, MfcOfcttftLT, {MWH98IS 2 9 9 tc 
^7' 5 '/2 7 80ftfc!)i:Ut 1 rt&RARft 
*MB l 2 4 i ©rtfBSttlMMWPteeft* *trvNS j 
StPWUfc/jeuh-e&sa^J^i-s. jas/iEJLL-r? 

fc&^t-tt, ^y-y-^2 7 1 lOfcbtM^ j :=j 
-(itLTj ©teSr^KLT, M : =M | | n k LTM 

OI^HLT, M : =M | | j t LTM©fiSrIIf 
*. W^tl,©^-?^ SBl <Dfen&2 9 3-C'R : = 
(C| |M) 0 mod n§rH-*LT. ffittftttffi2 

9 9{ciB«t-t-5 (^'^2710) . ^r*-eas|gi 

[0 1 9 5J *.*ry-7\ 9 4tfmft£tvfrb. xfy/ 
19 3 t?-feiy h Ztbtz. t , P r o v e r „ L Sr&Bfc-T 
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* 5 Ufs'^1 9 5) „ **ryrf \ 95tL< tt^y 
9 7#SSfr<S*u/fc6>, iSflttB2 9 ia»fe*tEB3^ 
RfciSflWS 0*^ 3»:T1 9 6) „ 
[0 19 6] fflGEfltStt, EW#2*»feaSfllSnfcv^ 
#V*R£rg:{ig|$2 8 2 tcgffLT,. flMWM«ft|S2 8 9 
IZ&mtZ (^^18 6) o R* mod n SrSS 
l©«#g|52 8 3-Cffj»i"S (^5-/18 7) . CI© 
»H|tje*©±fit©«r*«» ^imm^^J^^B 2 8 7KSE«S 
ft-CV^Ct— &-*-<5fl»fr, jE^-tt^SESB2 8 5 T?¥lJ£ 
10 (.XTyzfl 8 8) „ 8 8t?~SLfcS 

^fy^l 8 1 -C^UTtiUfcr **ry7\ 
8 6 t?ffi^^2 8 9 tclE® LfcR b Mat« flj 
fflSES!ftf^ffi:SfgP2 8 1 AV^mcti» B £kt^ R©T 
flt©*J:*)*»)abitMSr, ■EBM*2*»6>aWftofcfllr 
#i LTSlDffibT (^f-7/18 9) „ W2H82 8 1 
2*>6>W*fS. ^s^l 8 8TJ-SU«>ofei^ 
fix rjKftj Sr»8fe-t-*W**ttJA»2 8 1 2*»6>ttl/j 

I o i 9 7 j et±ijjjis i o ©atss^p b aA^fcs. 

20 7©*f|f§7 p n h3/V-C(4, NfelcJfiSECD* ^ 

30 <D7V<J K*— K*>fe»(iB*«C5^4:*-tf#5. 
[0 19 8] 
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Proven* 
f\W\\e := L 
if/ 

X '■= ffamd 

semdl x 

ff(BO©iv<9 /> 

iff p e modi' = xllA* 
M :=0 

Sff /* < i 
i :=i-/* 

M := 
elso 

M := M||i 
j:=0 

M := 
R := (CUM) 0 mod n 

[0199] [2. 1 3. Ml \<r>nm-?v 

1 (D^IS^o h EW#2tt^*«feiDf>*ufc.* 
«©EB9^)HSrff ft A-5. BE 5^ Si 2 lCf£tt8a>|EBI]#Jfl 

[0 2 0 0] [2. 14. S12©^K^nb3^] 

h#*P*«*«V"fciE88^JR©##., Ell 9. 
113 1) i©55M{cfc»t5J(fl 2CD*HS:7 P P 
14, tEW«2lc!iEK#lllSr#*.5r i:^T?$5 0 30 

[02 0 1] tm» 2 KfiHW^&a* U , L HBH^ffi 

[0 2 0 2] BEK^IB©#*.*»fcr±, #JHfcBJfc-*-*E 

«WR«r*ujB l-c^ic i **saj*«rw-*-#tfc't> vim-? 
[0203] ii2 (o*fiS7'o j- =2/u<omm^2 <om^ 40 

SrBIl 9*S«fctf@3 lfcf£oTlM!1-6. L©'fl^ % 
BE** 3 <D&EE© J£fTCD*«t f , #?IE2I 3 ft>;|ftfiEfcj&£tt 
<&WH»$R (v, e) , P,**ar**vr 

lSi£-C#Si:i-5o L*s (f, v, £ , P., 

P., P 2 , P„ P <( P«) <D£5KffirfL£j%x^2>b 

[0 2 0 41 g«»2 9 2T?«liE»3*>fe (C, n) £ 
StLT (^7^19 1) , ffifffKftffi2 9 9f::Bft 

^^3/ h8?2fgBl 2 2teSfiLfcn(£*fj£i-.5^*50 
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*KJ£LT» 2 9 9 (rlS^-TS 

9 7) c Ht«fo«^-HU*, h 

t , mW&2 ©#«P rovers, 9^5/ httflPfiMS 
LSrfcy M"5 frTyfl 9 3) . gfl 2<DMIS7"n 
Prover s ©t^H:fcV^, L*»t> 
(f, v, £ , P., P„ P 2 , P 3 , P 4 , P 6 ) 

[0 2 0 5]^7 1 y7 , 19 3«!SfTJJlfe?)v 
1 9 4^^. jRl©«e^"n h=»^fc*srj*^y 
?/19 4 <Df£#flft^J)I£rlII 3 1 (c^-r„ f d«t?fc5 

a^jei-s (^fj'/aioi) . fanEumii, * 

7 L ?/7'3 1 0 2^h^7-y^3 1 0 9*-CSrH^ff-r5 0 

[0206] mmtim*.f8M2 9 6T?a*x^ftj*u 

3 10 2). 5£ff£B2 9 1 i«?^|iEg52^xSr2l«i-'5 

(^fy^3 103) „ tfcHS|5 2a>£,j£{f ^fcpSrg 
{ISP 2 9 2-CgjfLT, fflr«fiM«ffi2 9 9 KfE^TS 

(^^y^"3 1 0 4) o 

[0 2 0 7] 

H*3 4] 

/O ' mod v 
SrtrJ|CLT±<ttfl!>«f*J, x fc«LV>i»Jt«iE-rS O*? 1 ?' 
/3 10 5) „ ^y^3 1 0 5<D*£ma s ^U^*&£-(;: 
f±, ^f^3 1 0 6 t^7 i s'7'3 1 0 7 SrHfT-t-.S. 
MIC 0 «rta!j£LTtit$&12®95 2 9 9 teSaS-*-£ 0*7" y 
/3106) . P„<D^h b< I4#*»*3fcfr*-S 
(^^5/^3 10 7). ^fy^3 1 05©i^S^L 
< ^^y^"3 1 0 8 t^7 L S'7'3 10 9 
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SrlUM"* (X*ry-73 1 0 9) o 
[0 2 0 8] P 2 <D^h b< ttA<fr»ft»fr*-S 
*ry7Z 110)o P,oA^t>U< tt^-frWSrHfTb 
X. Jfea^jc-efcs^iRBfei-S Ur^3 1 1 1) o 

*Tyzfz i i i <0te»asx<z>i§^Bu ^^^^3 i i 

^❖WSrllfi 1 ^ * (^^^^3 1 1 2) o R : = (C I 
|M) D mod nSr*KO»3»«|J2 9 3XfHfLU 
X, ffiftft&ffi2 9 9K|B<|Srrs (7^5/^3 1 1 

3)c ^f^3ii lofei^Kx&i^^jcte. ^ 

1 1 4 t7f5//3 1 1 5^trn o Ps<D 
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*^t>L<tt*^«r*fr*-6 Ur^3 1 14). 
RSrl«c|S*LX. ffi«ft»«2 9 9CB»t5 
3^3 115). ::it#*l©#B/n h=?/Hc*5 

[0 2 0 91 ^7^1 9 4asHfr£*i / fcfc % 

£*tfc U P r o v e r S x L SrflPBiH- 
£ Ufi/Zl 9 5) o 95tL< tt:;*^ 

^i 9 7»mtf£tiit$> x mmm2 9 i^6>*be»3^ 

(^f^l9 6) o 
10 [0 2 10] Sk±#mi 2cD*ffS^a h a^fcJStfSIE 
M*2<O^JIH-e*>So 
[0211] 
[*1 2] 
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57 58 
4*98 fflf«: (n,E) 

ttJA: Af invalid 



4*E» 

C7 := rand 
send (C,n) 
receive x 

p:=(xlW«iod*' 

send p 

receive 12 

if R B modn = C\\M 

output M 
else 

output invalid 

receive (£7,n) 
Bnd (n,t,L) 

if/ 

X :— rand 
■end x 
receive p 
if ffmodv ss xllii 

AT :=0 

ft 
else 

Af :=1 

A 

ft 
If ft 

ft 

«:=(C7||Af) D mod» 
else 

ft 

JZ := undefind 
send R 

[0 2 12] [2. 1 5. II 3<OM^^ h=^] 
0tttiE#3<Z>«|j& 030) r<E>3SWK:}3tt5SU 3© 

So 

[0 2 13] HI 3 0ttr»^EE7't3 b=Vl'&fif>&5*feIiE 
[0214] IftfiEttS J*4#^tSrt%aE-r-58^1f * 6 J: 
•f yb&Jk*) U 113 Cifiitt 50 



[0 2 15] [3. 1B2<om»W] 

[3. 1. ISfiE^ife] *S0(lS«TfM:, f^FOWW 

[0 2 16] pttJMfc-<Nfc»K Gttltffc*mi!M»SBJS 

= g , «fc$n5i:t > ( P> G, g, y, x) Ifif- 
try h©WRflMtT?*>*. (p. G, g, y) fr 

ov^t, sea-ct ^f-^-y vnmm-^m^^x^mrf 

5o 
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[0 2 17] XRtdHU G£*P5#©»SfeP£ Lt« 
So 

[0 2 18]Mtli, (p. G, g) &is*<rJ*&mb 



60 



L«t«)ti-*$^S7 :f -^T?fc«9, KBB#2a* (C, y, 

t, D izMvxmm^mmmmd^m^^xr (c, 
y , t, D = c-i>m»xzz>s: 5 Kfit/£-rSo 
[0 2i9] d D *at>*«F**©a-wii u 

E u £rd„(C;tt/S^SBt-)§-<ft£U HSr— jtrlfllttBBSfci: b 
t : = (Eu (x) » H (du I I x | ID) 

© <t 5 izfetb s r t & t? # So 

[0 2 2 0] ^y h£r_ti£©t&StC5£»-rsi, ^y 

(C, y, t, L) fc#LTEBI3#2©B^rfl!#di,fc: 
iotE, (D) Srffi-^bTBEW«S2 tfi-CD4-|HieaU 

tttrJlVNTIEBM* 2 rtT?C'frtUM-5 <fc 5 fci-*u«A 

V\> 

[0 2 2 11 d.«r-#[flM3-H*4: LT, t=x 

-d„ (L. y) ttftSIi: t>-C#S» 
[0 2 2 2] ^-Jry h©_hj£©5£igK:J;*U£. A^3 
(C, y, t, L) \Z.MLXT>K£Z>m^<{tteC t C 

[0 2 2 3] £i*i*lBffc^na©BJE£lcft£1£©tiit 

©0»J£^fS o 
[0224] [3. 2. 914 ©ttfg^P h 
(SE^2dS^H-^o^^©^^5' K B91 3, 
mi 9, HI2 0) $&1 4©*ffg:/n f-n/PTftt, fE9!# 
2 0|^^fiit bT^fHf^Sr^oTVNSi-rSo ^ 

a haM£&vz>mffl3<o^mt:mi 3^, sews 2 
©^MSSrHll 9(c^oTtaw-rs. 

[0 2 2 5] <felfc8&3rau ^iElt«^g|52 8 6(CJ:o 
TSU&r Sr^LT, C : = g'fc Ltf-y W^CSr 
£/£LT, BKEfMWM$8B2 8 7{CfE^-TS (^ts-/ 
131). **?y?\ 3 2©ftjp!)t > MGEfflflRfettffi 
2 8 7\zWzm£titcCk. ^itt#y Sr*t«>T, SUf 
g|52 8 1 *.9HW#2^2Sflr*-*. 

[0 2 2 6] ^y^l 9 l©ffcfc>»>te:, EE^2fi, 
^iE5i3^b^i$tbfc (C, y) SrgftgB 2 9 2 t?S 
flLt^ 9 9(^|S®-t-So ^y hasMB 

1 2 2li$|Lfcyl:»U:t5^5' hffc*£ 
SP1 2 1 *»6>a?UT, hSr«poTV'5*»if 5*»Sr 

W^-TS (^yyi9 2) ( I^JK^RK^y h 
Sri**:*^;: Ccj^liO) SrtS^L 

T, «^i*^a5 2 9 9 tC|E®i"S (^5-^19 7) „ * 



nr>m^\t- f-fryht. E§<m2<D^Jl|lP rove 
r„ *-*y hffriP«*Lfc1H«iaS2 9 1 2l*3K-try h 
■f S C^y^l 9 3) o 
[0 2 2 7] ^yzfl 9 3 a*3gf¥ ^yT" 

i9 4?rHtT-rSo rfflMSroMCMS^fy/ig 
4 0>B*Htt3UH«rH 2 0 CftotMtS. rt*MK*# 
#£51 2 4©»2©rt»««««r«*»feK*Wbfc*© 
SOWItimei, LIOE*S*bTV*3:fr3WBIRJ:*- 
10 JtttbT, ^y >*tO*/IS[-?*ai?*>5*>!N]tt5 
(^f?/2 0 1) o ^yht*»t*)5fcWtU 
4§-g-fcltt\ ffl ©)H»gB2 9 3(£*J^-CR^ R : =C 
■© J: 5 fctH* Lt, tftttfRtttt 2 9 9 IclE^-fS 
r?'7 , 2 0 2) o #{-RCOr<OH-»Sr. SEWSS2©tp© 

KSi©»j|t*2 ga-ei-^-ctfiltb-ctiv^ *^y 

M*St=x-d„ (L, y) ©«£ 5(~ffi/iB£iVCV^S 

C'<DW-*(*C t C ,roa -' , ©J;5J-tW-^-e 
*5©T, C*«riEffiH»2©^-CtM*br» EEBH3I2© 
*©fg 1 ©«*«B 2 9 3 "CfHlt Lit C^" £ SrSE^ 
20 #2©*T»^;b*TfcWlE-T?#.5„ E9HS2©!)-* 
JMEasjiv^frfctt, £©±3*;tftet>tf!»lc*3. x 

fy7 , 2oi Ka^x^sf h&m%>X'ib?> tm^tc 

1 2 l^hnmi^X 0 . RfclSMSJ^ 
LT, fMMHMlS 2 9 9 KflE**- S (^.7- y :/2 0 

4) . ZZtiX-&Z<O*ffi<O0ilz3&tf : S>x J ry-7l9 4 
©B*KMMB-C*>*. 

[0 2 2 8] ^^y7"l 9 4 a^fT £ £> , ^f^/ 
19 3 -C-fer y h t, Prover s , L SrffilffllSC 

30 2 9 1 2H^5 (^75-/19 5) „ ^f^/l 
9 5t>L<UXf?/19 7iiSff$nfc5) > RSrSHI 
1352 9 1 ±91Wffi«3^ mm-TZ (^fy^l9 6) . 

[0 2 2 9] ^|5E^ 3 ft, Sff BP 2 8 2 (C*3V>r|iEK^ 

2 3»S>2Ht**i,;fcR*SSflrLT, ffl#^lH5 2 8 9{cfS 
«T5 Uf^l3 3). y r &$8l<Ofc&&2 8 3 
•cttHur^ *©tmcjB*#tRi-Sci"6*»Sr, E^-tt 
^5ESB2 8 (^fj'^l 3 4). — gc-TS 
fc ! RI*Slrfc»S-H:tEBIi#2**«ift^y FSr^oT 

40 28 1 2±9 tti;*rr5o — S:b*V»£!RJ^SJtfc»^-tt 
iEM#2^»«:^y hfr«fo-CVN*ifc^*4*i,* 
H>o±(DX. ra&gjj *ft-rSW^3€rtil^a5 2 8 1 2 J: 

t) a^j-t-So 

[0 2 3 0] WJi*SS5 1 4 ©^J-fST'a h =uVXhZ> 0 W, 
1 4©7°d ha/V-CIl, *^©fffiW£7'n 
©mleSrffi«LTV^So 

[0 2 3 1] 

[^13] 
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C:=g r 

©Us© 



©Qse 

[0 2 3 2] [3. 3. mi 5<DM^^ h=^/^ 

m^mxm<Dmm^m<D^iyh. mi 9, 032, 
as 3) mi 5<Dttm-7v v^/^-Qmm-r^^y 

KjflWRLfctt, 4*11*3 ©dfcllflraii 4:, 

[0 2 3 3] 4MEHK3 14, RiEftW^jAflS 2 8 6 icio 
TSLSfcr Sr£j5fcU-C, C : = g't Utft V-^CSr 
4^LT. KBElMftftttftlS 2 8 7 KIEfr*-* (^T y 7* 30 

3 2 1). BjEEflMftfiL&ffi 2 8 7K|B«k**bfcC fc, 2r 
■«*y**i»r. 2HISI52 8 1 J:5E9!#2^SHt 
(^fy^a 2 2) „ 

[0 2 3 41 T.'ryri 9 l<Dft*5t){C, 
ttfE»3a»&33£flr$;h,ft: (C y) £gff 2 9 2 "Cg 
ALT, 1VfR«mV2 9 9 (eilE^-rSc ^2' 

1 2 2»4S«Lfcytc*fJE&-r5^2/ h&^S' hffcJS 
6151 2 ld»e>SBbT, f-^ry hSr«f->TV»5*»i?pi»Sr 

SB 2 9 9{^|E®!-r5 (^5-^1 97). *fj£-r£^ 
y b fcHfotfr&fctt, f^yM, HEWS 2 ©3«P r 
over s , httiPfif $R L fe-fc y h^S (*^s> 

7*193) , Prover s ©-tr h t LT, Lit) 
<u, i) £I&!>trlL-C*3< 0 

[0 2 3 51 ^s'T'l 9 3#HfiSiifc5)> Ti'rv-/ 
1 9 4SrHff-r^. hn/HC*3(t5^7 1 S'7'l 9 

5fcgB2 9 6^* VVi?TSL#s Sr^LT, %:=g' 



2 9 8 5-^3 3 1) 0 Sift SB 2 9 1^ 

e>4AK»2fc z *aSflM-5 (^f 5 '/3 3 2) 0 
[0 2 3 6] tfeiifc»3 tt, % SrgffSB 2 8 2 "CgM b 
t> tfftt{IM$ffi2 8 9lcBft-*-& Uf?/3 2 3) . 

■CS66>*vfcrit*i-©T», %3S)J ttJ* till 

^3?35 2 8 1 2i*)Ul* LT, fctlS^n h- n^SrJ&Ti- 5 
(^fy/3 2 4) „ gf2©j^g|5 2 8 4 tcSJVT V* 

[0 2 3 7] 
1*3 5] 

P '■ = X f 
(^5-/3 2 5) . frWLfcp&SHf 
SP2 8 1 J:5tEW#2'».aSflrr4 O^y^ 2 6) 0 
[0 2 3 8] BE994&2 tt, o SrgflSS 29 2 t?SfL 
T, flmftttffi2 9 9lcGft1-£ (^^y/3 3 3) 0 
SB2©»JSgB2 9 4-Ctj'SrH-^LT, gftLfcpi- 
fW-5*>W^fS (^f-y^S 3 4) „ «£©!&*£ b 
T-St51HPB, WSP^m^ 12 4©I2©^ 

«jjRiwiy#«fciii«4*v-t:v'»s*i>v^ i .©new v 

^ y 3 5) „ *<ry-7Z 3 5tfS 

*ffS*Lfc6>. i,o*t*LJ:iJ#fe^fc±BRK[i tit 

(^f?7'3 3 6) o ^fy^3 3 7 ©Jttfc©^ 
Mkk LT. i ,©1tt# i £iT©4ft£-tt, SSI ©8S»g|5 2 
9 3-CR : =C'*fh»LT, 1lMftfiitt£|S2 9 9 left* 
-TS (^f^3 3 7), Xxs/7'3 3 7 ©]*;$£©*£* 
t LT, i ,<Offi*s i X V ?V:#v^^-f3:. rt95*tflS«i$ 
gpi 2 4 0»2©rt^flMliy«B!*»e>i,«r**kbT, 

/3 3 8), ^^^^3 3 4T?-fttW»ofcS'g-i^ 
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fcrtirTRfc: 1 tRfitt, mm$kfflR2 9 9 fclE«frT4 

[0239] ^^^19 4 ^UtT^tL/c^ ^^^^ 

Zfafc t , Prover s , L Sr«F^i" 
5 O^^l 9 5) o 95tl< 1**7^ 

^19 7^^^?), 5£«SB2 9 ld>e>*BE»3^ 
R«r2£«1-S O^s^l 9 6) o 

[0 2 4 0] <ftE*3tt, &m&2 8 2K*5V^TSEga# 
2^6>2l«*^fcRSrS«b"C. «f*fiy*»2 8 9 (C|B 
•f* ^7^3 2 7) o y r tfBlO»3WB2 8 3 

ttfiES 
r := rand 

send (C,y) 
receive x 

receive 22 
if y r =.R 

output ' 
else 

output ' 
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10 



* ^tmmJ2 8 5-e^JSi--5 (^7 i s'7'3 2 8) . —&t%> 

r«&l **-t-StH^?rttiAgC2 8 1 2 <fc 

[02 4 1] £l_h**JB 1 5 cO^fgT'ct h n^t»*)5 0 * 
;To h 3*4*, £ 1 ©5O£0!l©Sg 3 ©Sj-fgT'n h =i/Ut 

[0 2 4 2] 
[Si 4] 



Prover 
s = rand 

X :=9* 
send x 
receive p 

i:=i + l 
R = C 
else 
R=l 

[0243] [4. m3<Dmmmi 

2ti, ^*yv<o&wmnfc*Mm.-tz>tz.m^ f-^-y 40 
[0244] 5, . ^nmm 1 {c*sv vr i*, <? 

[0 2 4 5] <C*5, ^ y hffr$ • 5§=fT^® 1 <fc 5^ 



[0 24 6] ^ y b&ft<0^m*m 5 -Sr^flg LTlftK 

* t W J£ 5 ^ X*T£tfll 10^? 
«I»lflsa*5FS*»frtt i = 0 4:366. 

h*^^^ffi«a^(ci{c|S:S$HTv>^ <) ^^^^5 

JJHb^H i BE W*JW £ ^ y h fttmflf * t SrJfi-T 
©te&iS-^fcS. 
[0 2 4 7] 06(4. XfttSMtT-try ba>UM»2~' 
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©S®^fT*5¥JiBSr^LTV^5. EI6t::*5V , >-C, *x 
as*3»3'fk«>^*^^5' hi: Lr»i:feT^fe«^5 

[0 2 4 8] r.OWJE©#J||H:H7-CiBM**tS. »4b 

[0249J H 7 ft. ^«CKflt#S«m'fkl§BK«>!neft- 

[0 2 5 0] f-*y h*^^h#SKfii«rSntei 
„(4, ^X^WYkas^ftfeftfc^y h®IL#f 

1 © 5 t ©-Cfc >9 , rt«^flMM^gk£:tiltt$ 

y h- J4 i „ J: •? /Jn $ V Nffl b#-l§-0> 5 *>*0!J»Hk 

[0 2 5 1] A^£ftfcjiL#^i (C*fbT, *-f*^ 
y^7 bXt^h^&K&ft&ivti 
Jt««r?Tft 5 o i > i „-CfctU«ii L#-J§- i fc*f^-T 5 
^fflfkfcfc^fTftfrfr-ri-'fcV''©-^ *"ry77 2~-iI 
•?:5^V^t>tf^^5/7'7 4— iStf„ 7fy^7 

2 T?Wu i „J; •) < i J: 9 />£v v&j#<fkas**£fT>fc 

fc^Tv^viibS-i-Sry * m^p*.*. tuts y* 

b KM H. Z> - t a* * ft jxff y h 7 p — 

^O-C^J^-toa^rfi 1 /* 5 o oVfJX^ y 7 3 -CIS, i 

[0 2 5 2] ^T'//7 4m i *«rtiB««Bfiy«*a 

ncfe^fix 5-c i &y ^ h^e>i!i^u 

oKfraAi-*. y * M;:*»-Mur, NG&ttwrt-s. 

[0 2 5 3] 138 ti9ttf^j' b^*r-t-*rtSC^flg<0 
^SMk^MSSr^L-CV^ 0 8*5iO!0 9»J:j3V>T, 

*-r, ^j'T'sk 9 i -c«i«<b©«w«»*^riB*» 

[0 2 5 4] EM#2*»fe©^y hOBOISWH 

§5. *ft.rtg5^«8©B8*t>iai 1 iZTF-tX SizfSifflz. 
[0 2 5 5] [flUOlOfefll] 

2, 113, 04, E5) ^4cOHi£^Ji; b-C^^s/ hf^ 

j& • ?m$m i srSft^-rSo n 4 ra^-jr y h^©^iH 
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[0 2 5 63 ^ y hf&**« 4 14, ^ y h©tt««r 
©tt« t }4, f<r?h ©&SE#JHB i SEK#)1I k #J»Hk# 

[0 2 5 7] ^©JBJgfctt^JHlc^SMBU^fcja* 

(4, ^SE^JilStliEW^JlHSr^i-^fefet-tt, &BE#© 

[0 2 5 8] S4{C*3V^T, ?-*-y hffrfc^Stt, ^ 
y hfMMMHfcSWS fc^yPM ll-*5V^TtfcmSr^ 

flMR«r*j«-rs. ir-cii, RSA^nmt-n-sRo&n 

20 T#mnm t tt^^ftsu^ t f-*r v v mmm<D<r- * 

«ISr^o^|iE#(DSEigiiE) Ofttf ^-y HSf-^'S 
— *6KfEi§-r5 0 ^fy^4 4(C*3Vn-C^s/ M&SU 
fnif^y h^m*4RE i: ^ y S fc»J*:-f* 

^•iry h^EE^JlIlVe r i f i e r ,^j*tbT*« Srfr 

[0 2 5 9] HStt^y b^W^JlHSr^bTV^,, 

t mW&m<fr kWryb ffcflWWH 8 - #^0lf 

t-^-x e>ttfc^-^ y h#*pffi ®cosa^ bv>a»i? 5 a»=sr 

40 5 a> if 5 *»*WJW-5. y h as^fflftSr^ 5 ft 

fi, ^?y^5 6 fc48V^ % E9i#B*rflWRf f -*'«- 
^. 7(C|Btt$ttf^ i JC-fey hU ^.X 7(^ 
*3V^T i„=Sr^>^ y ^ V b-f5 0 5{C*3V> 

bastU»'fkS-^ftv>i:ii£iJ^$ttix(i, ^fy 
^5 8fc*JV»T i SrOlC-fey **ry ^5 9 tc*3 

V^, ^*T?©H16^J-eJ£^4fcJ; d„, LJ:«3 

hcO^SUfk^JiS I n i tst^y h©BEW^JiBP r o 
50 veitkf'trybtfjJBW&'Lb^trybtkomc'?- 
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try Yftft^Wt<Dm&*^ttXWrt$:ftt£o 0 
[0 2 6 01 

zmm-tzz. k&ffi±-fz>mm-?&z> 0 m2&& s mm 

T\ It-fry h^*&Hfc*^rt»Sr»=#teBEW"C# 
[0 2 6 1] *JSBl|fcJ:*tfi* «at^*KiSJK«liEBI9 

$e>tc, f^ b©*aiE«Fm3puffi#ic«#-r-s 

^t^|JS^«#i-Saifi^s^Tt)i^ , rv^/j^v^r. £ SrSEK-r^^i 

[El 2] fry bfttfL ■ SWfSKlK^WjStfciSi-^n s> 

^0-Cfc£ o 

f h-c&s 0 

[0 6 3 KW^©^?/ H6»©ibf^SrR93-r5 7 
[0 7 3 *«*JJ»fb«)*U^— ^^fcww-rs ^n- 

f — hT$)§ 0 

[0 8 3 BEra*Ort»tt««I)HYfc:©-War»M-r4 7 

f -t — h-efcSo 
[El 9 3 BEM*Ort^«ffi^fb©— WSrlftM^S 7 

[0103 BEW#a»&f h«rfifl»i-5*«tRBI| 

[011] EEK#^&MffiKlB^n«r^&^Jn«rRn 

[012] f^ h*BH^J;T/f H 
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[013] f h*SE<D#mfrRm-5:7»— f * 

[01 4] f ^ b&mv^M&m.wi-z?*-?'^ 

[015] f ^ h«ISE(D^Ji[iSrR0Ji-5^n-^^ 

[016] f^r>> NttH^JK&RW^S^o—f * 

[017] f^s/ HftBEO^JHSrRWt-a^a-^^ 
10 ~h-C$>6o 

[018] f ^ b*E<D#)H£Rm-*:7n-f * 

[019] f hBE|l!O^J>H*RW^S:7*— f 

[02 0] f ^ MEM*««>— WSr«Wi-5 7n — 
f h-C&So 

[021] ^try bmmmm^-^m.mir^^u— 

[02 2] f ^ MiEM^JiI|(D-^SrIftPJ-r-5^ci- 

[02 3] f-try hBEM#«©— «BfirKWi-6 7i3 — 
f ht?*>$ 0 

[02 43 f^ hEW*«<D-tt&Rm-S:7n — 

f -r-h-cfcSo 

[0253 f ^ bummm-^mm-r^^- 

[02 6] f MSEW^WO— eSft»Wi"*^a — 

fir— h-e*>^ 0 

[02 7] ^fry YUW^m<D-%!>*WLW1rZ>'7u- 
30 h"CS>*o 

[028] fcumR&ft^wt<omtfL*7F-i-7* y?m 

[02 93 IEM^I0«ff y * 0 
[03 03 f -Jr^ h*fiE»0*j*Sr«^n^^Ht? 

[ess] huw^M&wiw-rzyv— ^•■v— 

1 ftr? ftfimm 

2 hSE9§Kfi 

3 f*-? htfeSE^a 

5 ft"? hSSfi^iS: 

6 hUS^— 

50 7 BEW#H*W«?'— * 
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